Windows Security Log Event ID 807

Operating Systems Windows 2003 and XP
CategoryPolicy Change
Type Success
Corresponding events
in Windows 2008
and Vista		 4912  

807: Per user auditing policy set for user

On this page

Not confirmed. See event 806 for more information on per user selective auditing.

See Roger Grimes article at www.windowsitpro.com for an excellent introduction to per user selective auditing

Free Security Log Resources by Randy

Description Fields in 807

  • Target user: %1
  • Policy ID: %2
  • Category Settings:
  • System: %3
  • Logon: %4
  • Object Access %5
  • Privilege Use: %6
  • Detailed Tracking: %7
  • Policy Change: %8
  • Account Management: %9
  • DS Access: %10
  • Account Logon: %11

Supercharger Enterprise


Load Balancing for Windows Event Collection

 

Examples of 807

Per user auditing policy set for user:
Target user:%1
Policy ID:%2
Category Settings:
System:%3
Logon:%4
Object Access%5
Privilege Use:%6
Detailed Tracking:%7
Policy Change:%8
Account Management:%9
DS Access:%10
Account Logon:%11

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

Stay up-to-date on the Latest in Cybersecurity
Sign up for the Ultimate IT Security newsletter to hear about the latest webinars, patches, CVEs, attacks, and more.
Work Email:

 

Upcoming Webinars
Additional Resources