InstantForum.NET v4.1.4UltimateWindowsSecurity.com Forumhttp://forum.ultimatewindowssecurity.com/noreply@ultimatewindowssecurity.comThu, 17 May 2012 08:51:39 GMT20http://forum.ultimatewindowssecurity.com/Topic459-291-1.aspxThe only subcategory needed to be enabled is <A href="http://www.ultimatewindowssecurity.com/wiki/WindowsSecuritySettings/Application-Group-Management">Application Group Management</A> for this event.<P>What method are you using to create an application group? Authorization Manager MMC snap-in? Also have you enabled </P><DIV style="FLOAT: right"><A id=ctl00_ctlContentPlaceHolder_ctl00_ctlViewTabCategory_ctlViewArticles_ctlPanelBar_ctlVisibleDataGrid_ctl03_hypEditArticle class=EditButton title=Edit href="http://www.ultimatewindowssecurity.com/wiki/Staff/StaffEditArticle50625.aspx"></A> </DIV><P><SPAN class=LargeTxtBold><A id=ctl00_ctlContentPlaceHolder_ctl00_ctlViewTabCategory_ctlViewArticles_ctlPanelBar_ctlVisibleDataGrid_ctl03_hypAricleTitleUnread title="By default, if you define a value for a policy in one of the top-level categories—either in the computer's Local Security Policy or in an applicable GPO—then that top-level policy will usually override any configurations that you make at the subcategory..." href="http://www.ultimatewindowssecurity.com/wiki/WindowsSecuritySettings/Audit-Force-audit-policy-subcategory-settings-Windows-Vista-or-later-to-override-audit-policy-catego"><STRONG><FONT color=#3366aa>Audit: Force audit policy subcategory settings </FONT></STRONG></A></SPAN><P><SPAN class=LargeTxtBold></SPAN> Sat, 04 Sep 2010 12:39:37 GMTRandyFranklinSmithhttp://forum.ultimatewindowssecurity.com/Topic459-291-1.aspxHello<br>For testing purposes event 4783 should be triggered. Appropriate category 'Account Management', 'DS Access', 'Object Access' and all subcategories auditing were set, but no any events are logged into Security log after Application group changing, adding/removing members. Could you please advice how to have it work?Sat, 04 Sep 2010 11:09:58 GMTmelissa