ItemBox

Audit Directory Service Replication

Audit Directory Service Replication

Audit Directory Service Replication determines whether the operating system generates audit events when replication between two domain controllers begins and ends.

Event volume: Medium on domain controllers.

Computer TypeGeneral SuccessGeneral FailureStronger SuccessStronger FailureComments
Domain ControllerNoNoIFIFIF - Events in this subcategory typically have an informational purpose and it is difficult to detect any malicious activity using these events. It’s mainly used for Active Directory replication troubleshooting.
Member ServerNoNoNoNoThis subcategory makes sense only on domain controllers.
WorkstationNoNoNoNoThis subcategory makes sense only on domain controllers.

Events List:

  • 4932(S): Synchronization of a replica of an Active Directory naming context has begun.

  • 4933(S, F): Synchronization of a replica of an Active Directory naming context has ended.