Windows Security Log Event ID 4881
| Operating Systems |
Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
|
Category
• Subcategory | Object Access
• Certification Services |
|
Type
|
Success
|
Corresponding events
in Windows
2003
and before |
|
4881: Certificate Services stopped
On this page
This event is logged each time the Active Directory Certificate Services service is stopped.
This event event is only logged if "Start and stop Active Directory Certificate Services" is enabled on the Audit tab of the CA's properties in Certificate Services MMC snap-in and of course if the Certificate Services audit subcategory is enabled with auditpol.
Free Security Log Resources by Randy
Supercharger Enterprise
Load Balancing for Windows Event Collection