We are not able to see the event ID: 4657 (A registry value was modified) in domain controller events.
Please let me know if any auditing needs to be enabled to get these events in domain controller.
Kindly help me...
Regards,
Sundar