WinSecWiki > Security Settings > Local Policies > Audit Policy > Process Tracking > RPC Events

RPC Events

This category logs events related to Remote Procedure Call security. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
4816	RPC detected an integrity violation while decrypting an incoming message.
5712	A Remote Procedure Call (RPC) was attempted.

Upcoming Webinars

Additional Resources

Process Tracking

•	Process Creation
•	Removable Storage Devices
•	Process Termination
•	DPAPI Activity
•	RPC Events

User name:
Password:
	/ Forgot?
	Register

April 2025 Patch Tuesday	"Patch Tuesday - One Zero Day! " - sponsored by LOGbinder

Follow @randyfsmith

About | Newsletter | Contact

Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2025 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.