Welcome to Event-o-Pedia

Search Advanced Ex: logon failure -"account disabled" -"LogType:Windows Event Log" 1 event(s) found in the alternate event classification Events by Business Needs Found categories (1 - Events, 0 - Folders): EventID 4715 - The audit policy (SACL) on an object was changed. The audit policy (SACL) on an object was changed. The following event is always audited when audit policy is disabled regardless of the "Audit Policy Change" subcategory setting in Windows Vista. Fi... Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Policy Change->Audit Policy Change->EventID 4715 - The audit policy (SACL) on an object was changed.