Folder Details User Activity->Object Access->Registry Object Access

Registry Object Access This category comprises events reflecting access attempts to registry objects across the enterprise. Field Matching Field Description Sample Value When At what date and time a user activity originated in the system. 1/1/2000 Who Account or user name under which the activity occured. SomeUser What The type of activity occurred (e.g. Logon, Password Changed, etc.) Registry Object Access Where The name of the workstation/server where the activity was logged. 10.10.10.10 Where From The name of the workstation/server where the activity was initiated from. 10.10.10.10 Severity Specify the seriousness of the event. High WhoDomain WhereDomain Result Successful or Failed Object Name Object Type Whom