| Events to Audit | Description |
| Query Value | Reads a value entry from a Registry key |
| Set Value | Sets value entries in a Registry key |
| Create Subkey | Create subkeys on a selected Registry key |
| Enumerate Subkeys | Audits events that attempt to identify the subkeys of a Registry key such as expanding the tree view |
| Notify | Notifies events from a ket in the Registry |
| Create link | Creates a symbolic link in a particular key |
| Delete | Deletes a Registry object |
| Write DAC | Changes security permissions on a key |
| Read Control | Reads the security permissions of a key |
- Admin KnowledgeBase
- Articles & Tutorials
- Authors
- Blogs
- Free Tools
- SharePoint Hosting
- Message Boards
- Newsletters
- Software
- White Papers
- Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
- Windows NT
- Registry Tips
- Event Logs
- Registry Events that can be audited
- Event Logs
- Registry Tips
- Windows NT
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
- Section(s): Audit, Event Logs
- Published on Apr 20, 2004.
- Last Modified on Apr 20, 2004.
- Last Modified by Wayne Maples.
- Rated 1.5 out of 5 based on 2 votes.
Latest tips by Wayne Maples
Article not looking right or info is missing? Let us know so that we can fix it: .
Featured Links*
Become a WindowsNetworking.com member!
Discuss your network issues with thousands of other network administrators. Click here to join!
Featured Freeware!
