Configuration of ID 4662 makes ID 4780?

[Przem0]

Hi,

Does configuration of object auditing for event ID 4662 could trigger event ID 4780?

As we had health alert about misconfiguration of DS Object Auditing we followed documentation and alert was auto closed. Then we received alert - The ACL was set on accounts which are members of administrators groups - in another monitoring tool.

Looking forward any feedback.

Regards,

Przem0

[#2]

Could be, but if you don't see it again after configuring the audit, I wouldn't bother with it too much.