Navigation section

event id 4663

About this tag
Event ID 4663 is a Windows security audit event that logs when an attempt is made to access an object, such as a file or folder. This event is part of the Advanced Audit Policy under Object Access and is commonly used for file system auditing on Windows servers. Configuring Event ID 4663 requires enabling the Audit Object Access policy in both the local security policy and the advanced audit policy. Troubleshooting issues with Event ID 4663 not logging involves verifying that the correct audit policies are set and that the SACL on the target objects is properly configured. This event is essential for tracking access to sensitive data and meeting compliance requirements.
  1. K

    File System auditing - Event ID 4663 not logging

    Hello, I hope someone can help with this issue. I have a requirement to configure file system logging on my windows file server and I have setup the security policy to track file system object access but I am not getting Event ID 4663 (An attempt was made to access an object). These are the...
    • kweber
    • Thread
    • access monitoring administration auditing configuration event id 4663 event viewer file audit file sharing file system group policy logging object access permissions security policies server management system settings tech support troubleshooting user rights windows server
    • Replies: 1
    • Forum: Windows Server Forums
Back
Top