Windows Security Log Event ID 4879

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
 • Subcategory
Object Access
 • Certification Services
Type Success
Corresponding events
in Windows 2003
and before

4879: Certificate Services restore completed

On this page

self explanatory

To find out when the restore started look earlier in the log for 4878.


Free Security Log Resources by Randy

Setup PowerShell Audit Log Forwarding in 4 Minutes



Upcoming Webinars
    Additional Resources