Files
windows-itpro-docs/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md
illfated adf1425650 Threat Protection/Auditing: event 4985 page link
Description:

As reported in issue ticket #6470 (Incorrect link), the current link
named "4985(S): The state of a transaction has changed." links to Event
"4674(S, F): An operation was attempted on a privileged object."

This typo is a "no-brainer" and is likely the result of a copy-paste
mistake or a mass conversion oversight, not a dedicated operation.

Thanks to azupwn for pointing out this issue.

Changes proposed:
- Insert the correct event number 4985 in the link
- Reduce markdown bullet list spacing from 3 to 1 under "Applies to"

Ticket closure or reference:

Closes #6470
2020-04-12 19:28:29 +02:00

38 lines
1.5 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
title: Audit Other Privilege Use Events (Windows 10)
description: This security policy setting is not used.
ms.assetid: 5f7f5b25-42a6-499f-8aa2-01ac79a2a63c
ms.reviewer:
manager: dansimp
ms.author: dansimp
ms.pagetype: security
ms.prod: w10
ms.mktglfcycl: deploy
ms.sitesec: library
ms.localizationpriority: none
author: dansimp
ms.date: 04/19/2017
---
# Audit Other Privilege Use Events
**Applies to**
- Windows 10
- Windows Server 2016
This auditing subcategory should not have any events in it, but for some reason Success auditing will enable generation of event 4985(S): The state of a transaction has changed.
| Computer Type | General Success | General Failure | Stronger Success | Stronger Failure | Comments |
|-------------------|-----------------|-----------------|------------------|------------------|-----------------------------------------------------------------------|
| Domain Controller | No | No | No | No | This auditing subcategory doesnt have any informative events inside. |
| Member Server | No | No | No | No | This auditing subcategory doesnt have any informative events inside. |
| Workstation | No | No | No | No | This auditing subcategory doesnt have any informative events inside. |
**Events List:**
- [4985](event-4985.md)(S): The state of a transaction has changed.