Log Name:      Security
Source:           Microsoft-Windows-Security-Auditing
Date:              9/23/2010 4:10:19 PM
Event ID:        4670
Task Category: Authorization Policy Change
Level:              Information
Keywords:      Audit Success
User:              N/A
Computer:      DC1
Description:
Permissions on an object were changed.

Subject:
	Security ID:		RESEARCH\DCC1$
	Account Name:	DCC1$
	Account Domain:	RESEARCH
	Logon ID:		0x6d883

Object:
	Object Server:	Security
	Object Type: 	Key
	Object Name:	\REGISTRY\MACHINE\SOFTWARE\New Key #1
	Handle ID:	0x154

Process:
	Process ID:	0x5f8
	Process Name:	C:\Windows\regedit.exe

Permissions Change:
	Original Security Descriptor:	D:AI(A;CI;RC;;;S-1-5-21-1142721486-4050565067-49909644-1103)(A;ID;KR;;;BU)(A;CIIOID;GR;;;BU)(A;ID;KA;;;BA)(A;CIIOID;GA;;;BA)(A;ID;KA;;;SY)(A;CIIOID;GA;;;SY)(A;CIIOID;GA;;;CO)
	New Security Descriptor:	D:ARAI(A;CI;KR;;;S-1-5-21-1142721486-4050565067-49909644-1103)(A;ID;KR;;;BU)(A;CIIOID;GR;;;BU)(A;ID;KA;;;BA)(A;CIIOID;GA;;;BA)(A;ID;KA;;;SY)(A;CIIOID;GA;;;SY)(A;CIIOID;GA;;;CO)