Forum Discussion

Przem0's avatar
Przem0
Brass Contributor
Mar 09, 2023

Configuration of ID 4662 makes ID 4780?

Hi,

Does configuration of object auditing for event ID 4662 could trigger event ID 4780?

 

As we had health alert about misconfiguration of DS Object Auditing we followed documentation and alert was auto closed. Then we received alert - The ACL was set on accounts which are members of administrators groups - in another monitoring tool.

 

 

 

 

 

 

Looking forward any feedback.

Regards,

Przem0

  • thalpius's avatar
    thalpius
    Brass Contributor
    Mar 17, 2023
    Could be, but if you don't see it again after configuring the audit, I wouldn't bother with it too much.

Resources