Windows Security Log Events by ID

General purpose event for IPSEC Policy Agent events. "IPSEC Policy Agent" becomes "IPSEC Services" in w3. Also this event switches categories to Policy Change.

If you assign an IP Security Policy in a GPO in AD, event ID 615's description specifies IPSEC PolicyAgent Service: Using the Active Directory Storage policy. If you assign the IPSec policy through the local GPO, event ID 615's description specifies IPSEC Policy-Agent Service: Using the Active Local Registry policy, as (i) there's no Active Directory Storage policy or (ii) the Active Directory Storage policy couldn't be applied successfully and there's no Cached policy. If Win2K encounters a problem applying the policy, the OS logs event ID 616 (IPSec policy agent encountered a potentially serious failure).