deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-20 09:17:25 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
windows-itpro-docs/windows/security/threat-protection/auditing/audit-other-privilege-use-events.md
illfated adf1425650 Threat Protection/Auditing: event 4985 page link 
Description:

As reported in issue ticket #6470 (Incorrect link), the current link
named "4985(S): The state of a transaction has changed." links to Event
"4674(S, F): An operation was attempted on a privileged object."

This typo is a "no-brainer" and is likely the result of a copy-paste
mistake or a mass conversion oversight, not a dedicated operation.

Thanks to azupwn for pointing out this issue.

Changes proposed:
- Insert the correct event number 4985 in the link
- Reduce markdown bullet list spacing from 3 to 1 under "Applies to"

Ticket closure or reference:

Closes #6470
2020-04-12 19:28:29 +02:00

1.5 KiB
Raw Blame History

title, description, ms.assetid, ms.reviewer, manager, ms.author, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, ms.localizationpriority, author, ms.date
title description ms.assetid ms.reviewer manager ms.author ms.pagetype ms.prod ms.mktglfcycl ms.sitesec ms.localizationpriority author ms.date
Audit Other Privilege Use Events (Windows 10) This security policy setting is not used. 5f7f5b25-42a6-499f-8aa2-01ac79a2a63c dansimp dansimp security w10 deploy library none dansimp 04/19/2017

Audit Other Privilege Use Events

Applies to

  • Windows 10
  • Windows Server 2016

This auditing subcategory should not have any events in it, but for some reason Success auditing will enable generation of event 4985(S): The state of a transaction has changed.

Computer Type General Success General Failure Stronger Success Stronger Failure Comments
Domain Controller No No No No This auditing subcategory doesn’t have any informative events inside.
Member Server No No No No This auditing subcategory doesn’t have any informative events inside.
Workstation No No No No This auditing subcategory doesn’t have any informative events inside.

Events List:

  • 4985(S): The state of a transaction has changed.