Windows Security Log Event ID 6144

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
 • Subcategory
Policy Change
 • Other Policy Change Events
Type Success
Corresponding events
in Windows 2003
and before

6144: Security policy in the group policy objects has been applied successfully

On this page

This is a useful event. This event does not just get logged each time Group Policy refreshes. It only gets logged (based on testing Win2012R2) when something in Security Settings the RSOP has changed (i.e. someone edited a Security Setting in one of the GPOs applicable to this computer, or Local Security Policy)thus necessitating Windows to adjust local configuration to meet Group Policy. So basically this event tells you a security configuration change has occurred due to Group Policy (including Local Security Settings). It doesn't tell you which policy(ies) but at least you know something has changed.

Free Security Log Resources by Randy

Supercharger Enterprise


Examples of 6144

Security policy in the group policy objects has been applied successfully.

Return Code: 0

GPO List:
{6AC1786C-016F-11D2-945F-00C04fB984F9} Default Domain Controllers Policy
{31B2F340-016D-11D2-945F-00C04FB984F9} Default Domain Policy

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources