2017-04-19 14:12:47 -07:00

901 B

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author
title description ms.pagetype ms.prod ms.mktglfcycl ms.sitesec author
6424(S) The installation of this device was allowed, after having previously been forbidden by policy. (Windows 10) Describes security event 6424(S) The installation of this device was allowed, after having previously been forbidden by policy. security w10 deploy library Mir0sh

6424(S): The installation of this device was allowed, after having previously been forbidden by policy.

Applies to

  • Windows 10
  • Windows Server 2016

This event occurs rarely, and in some situations may be difficult to reproduce.

Subcategory: Audit PNP Activity

Required Server Roles: None.

Minimum OS Version: Windows 10 [Version 1511].

Event Versions: 0.

Security Monitoring Recommendations

  • There is no recommendation for this event in this document.