Windows Security Log Event ID 4899

4899: A Certificate Services template was updated

On this page

• Description of this event
• Field level details
• Examples

Having tested for this event by making changes to certificate templates I conclude Windows fails to log this event.

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

• Free Security Log Quick Reference Chart
• Windows Event Collection: Supercharger Free Edtion
• Free Active Directory Change Auditing Solution
• Free Course: Security Log Secrets

Description Fields in 4899

• %1 v%2 (Schema V%3)
•   %4
•   %5

Template Change Information:

•    Old Template Content: %8
•    New Template Content:  %7

Additional Information:

•     Domain Controller: %6

Supercharger Free Edition

Supercharger's built-in Xpath filters leave the noise behind.

Free.

 

Mini-Seminars Covering Event ID 4899 27 Most Important Windows Security Events

 

Upcoming Webinars Protecting Data On USB Drives: Hardware Options, Windows BitLocker and Mac APFS and Beyond The Changing Landscape of Authentication and Logon Tracking in Hybrid Environments of Entra and AD

Additional Resources

•	Event IDs
•	All Event IDs
•	Audit Policy