SharePoint Audit Log Event ID 53

SourceSharePoint (LOGbinder SP)
Audit FlagUnknown or not applicable
Windows Security Log
Category
 • Subcategory
Object Access
 • Application Generated
Type Success
Discussions on Event ID 53
Ask a question about this event

53: Information management policy changed

This is an event from SharePoint audit event from LOGbinder SP generated by Audit Flag  Unknown or not applicable.

On this page

The collection set (information management policy) that governs content has changed. Expiration, auditing, document labels, and bar codes are examples of content management. This event is always audited and not connected with any audit flag.

Free Security Log Resources by Randy

Description Fields in 53

  • Occurred: this is the date and time when SharePoint recorded the event to the internal SharePoint audit log and may be earlier than the date/time in the header of this event which reflects when LOGbinder SP wrote the event to Windows event log
  • Site: This is the URL of the site generating this event
  • User: name of the user who performed the action
  • Object
    • Type: may be list, list item, document, folder, or web site
    • Subtype:
    • URL: URL of the object targeted by this operation
    • Title: title of the object targeted by this operation
    • Description: description that appears on the page
  • Policy details: data connected with the policy after the change.

Supercharger Free Edition


Your entire Windows Event Collection environment on a single pane of glass.

Free.

 

Where Does This Event Come From?

This Event Is Produced By

Which Integrates with Your SIEM

Examples of 53

Information management policy changed
Occurred: 11/21/2011 3:15:28 PM
Site: http://sp2010-sp
User: System Account
Object
  Type: List
  Subtype: Generic List
  URL: /Lists/Tasks/AllItems.aspx
  Title: Tasks
  Description: Use the Tasks list to keep track of work that you or your team needs to complete.
Policy details: <data ContentTypeId="0x01080030F71437AD53BC458A9F8A6F248E9D21" ContentTypeName="Task"><p:Policy xmlns:p="office.server.policy" id="" local="true"><p:Name>Task</p:Name><p:Description></p:Description><p:Statement></p:Statement></p:Policy></data>

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Additional Resources