WinSecWiki > Security Settings > Local Policies > Audit Policy > System Events > Security System Extension

Security System Extension

The Windows security infrastructure supports extensibility and through various types of plug-ins and this category logs all activity with such plug-ins. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event IDTitle
4610 An authentication package has been loaded by the Local Security Authority
4611 A trusted logon process has been registered with the Local Security Authority
4614 A notification package has been loaded by the Security Account Manager.
4622 A security package has been loaded by the Local Security Authority.
4697 A service was installed in the system

Back to top

 

Upcoming Webinars
Additional Resources