WinSecWiki > Security Settings > Advanced Audit Policies > Policy Change > Authentication Policy Change

Audit Authentication Policy Change

This category tracks any configuration changes that would impact how user accounts are authenticated although password and lockout policies are conspicuously missing. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event IDTitle
4706 A new trust was created to a domain.
4707 A trust to a domain was removed.
4713 Kerberos policy was changed.
4716 Trusted domain information was modified.
4717 System security access was granted to an account.
4718 System security access was removed from an account.
4865 A trusted forest information entry was added.
4866 A trusted forest information entry was removed.
4867 A trusted forest information entry was modified.

Back to top

 

Upcoming Webinars
  • Top 5 Security Tasks to Automate with PowerShell
  • Maze Ransomware Deep Dive: Using Threat Research Reports and MITRE ATT&CK to Turn Analysis into Action with Maze as an Example
  • Ethical Hacking 101: Perform Your Own Privilege Elevation and Lateral Movements with Metasploit
Additional Resources
    Policy Change
    •Audit Policy Change
    •Authentication Policy Change
    •Authorization Policy Change
    •Filtering Platform Policy Change
    •MPSSVC Rule-Level Policy Change
    •Other Policy Change Events

     
     
    Home
    		 > 
    Windows
    		 > 
    WinSecWiki
    User name:
    Password:
      / Forgot?
      Register
    September 2020
    Patch Tuesday    		 "Patch Tuesday: Critical Browser and Exchange Vulnerabilities " - sponsored by LOGbinder
    Follow @randyfsmith
    Home
    Tweet
    Follow @randyfsmith
    About | Newsletter | Contact Ultimate Windows Security is a division of Monterey Technology Group, Inc. ©2006-2020 Monterey Technology Group, Inc. All rights reserved.
    Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.     		Terms of Use | Privacy | Return Policy