WinSecWiki > Security Settings > Local Policies > Audit Policy > Account Management > Application Group

Application Group Management

Application groups are part of Windows's role based access control for applications and are maintained in the Authorization Manager MMC snap-in. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
4783	A basic application group was created.
4784	A basic application group was changed.
4785	A member was added to a basic application group.
4786	A member was removed from a basic application group.
4787	A non-member was added to a basic application group.
4788	A non-member was removed from a basic application group.
4789	A basic application group was deleted.
4790	An LDAP query group was created.
4791	A basic application group was changed.
4792	An LDAP query group was deleted.

Back to top

 

Upcoming Webinars Understanding the Multiple Layers of Privileged Access in Windows The Top 5 Challenges of Windows Event Collection – And How to Solve Them

Additional Resources