ItemBox

Audit Application Generated

Audit Application Generated

Audit Application Generated generates events for actions related to Authorization Manager applications.

Audit Application Generated subcategory is out of scope of this document, because Authorization Manager is very rarely in use and it is deprecated starting from Windows Server 2012.

Computer TypeGeneral SuccessGeneral FailureStronger SuccessStronger FailureComments
Domain ControllerIFIFIFIFIF – if you use Authorization Manager in your environment and you need to monitor events related to Authorization Manager applications, enable this subcategory.
Member ServerIFIFIFIFIF – if you use Authorization Manager in your environment and you need to monitor events related to Authorization Manager applications, enable this subcategory.
WorkstationIFIFIFIFIF – if you use Authorization Manager in your environment and you need to monitor events related to Authorization Manager applications, enable this subcategory.

Events List:

  • 4665: An attempt was made to create an application client context.

  • 4666: An application attempted an operation.

  • 4667: An application client context was deleted.

  • 4668: An application was initialized.