Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Configuration of ID 4662 makes ID 4780?

Brass Contributor

Hi,

Does configuration of object auditing for event ID 4662 could trigger event ID 4780?

 

As we had health alert about misconfiguration of DS Object Auditing we followed documentation and alert was auto closed. Then we received alert - The ACL was set on accounts which are members of administrators groups - in another monitoring tool.

 

rd.png

 

 

 

 

 

Looking forward any feedback.

Regards,

Przem0

1 Reply
Could be, but if you don't see it again after configuring the audit, I wouldn't bother with it too much.