PolicyChange_AuditOtherPolicyChangeEvents

PolicyChange_AuditOtherPolicyChangeEvents

Description

This policy setting allows you to audit events generated by other security policy changes that aren't audited in the policy change category, such as the following: Trusted Platform Module (TPM) configuration changes. Kernel-mode cryptographic self tests. Cryptographic provider operations. Cryptographic context operations or modifications. Applied Central Access Policies (CAPs) changes. Boot Configuration Data (BCD) modifications.

Audit Policy CSP - Windows Client ManagementMicrosoftLearn

CSP

./Device/Vendor/MSFT/Policy/Config/Audit/PolicyChange_AuditOtherPolicyChangeEvents

Recommended Setting

Format: int Value: 3

Audit event on success and failure.

Available in Settings Catalog

YES

Audit Other Policy Change Events