Windows Server 2012 Security Log Event Expand / Collapse
Author
Message
Posted 6/24/2013 5:59:24 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/26/2013 11:23:50 AM
Posts: 6, Visits: 11
Hello,

I'm not seeing security log events on Windows Server 2012 indicating when a service was installed. On Windows 2008, this is event id 4697. On my 2012 install, I have subcategories enabled and the following is set:

System
Security System Extension Success and Failure

Advice on how to log when a service was installed is appreciated.

Thanks,
Paul
Post #1245
Posted 6/26/2019 7:17:20 PM
Junior Member

Junior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior MemberJunior Member

Group: Administrators
Last Login: 4/13/2009 5:07:47 PM
Posts: 15, Visits: 0
Hi,

We've updated the event in our SecLog Encyclopedia. It turns out that the event is no longer generated on systems earlier than Server 2016 and Windows 10. Microsoft's documentation shows that those are the minimum OS versions for this event.

https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=4697
Post #8581
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 2:53am

Upcoming Webinars
    Additional Resources