mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-13 17:43:21 +00:00
1.5 KiB
1.5 KiB
title, description, ms.assetid, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author
| title | description | ms.assetid | ms.pagetype | ms.prod | ms.mktglfcycl | ms.sitesec | author |
|---|---|---|---|---|---|---|---|
| Audit Process Creation (Windows 10) | This topic for the IT professional describes the Advanced Security Audit policy setting, Audit Process Creation, which determines whether the operating system generates audit events when a process is created (starts). | 67e39fcd-ded6-45e8-b1b6-d411e4e93019 | security | W10 | deploy | library | brianlic-msft |
Audit Process Creation
Applies to
- Windows 10
- Windows 10 Mobile This topic for the IT professional describes the Advanced Security Audit policy setting, Audit Process Creation, which determines whether the operating system generates audit events when a process is created (starts). These audit events can help you track user activity and understand how a computer is being used. Information includes the name of the program or the user that created the process. Event volume: Low to medium, depending on system usage Default: Not configured
| Event ID | Event message |
|---|---|
4688 |
A new process has been created. |
4696 |
A primary token was assigned to a process. |