Windows Event ID 4674 - An operation was attempted on a privileged object

Event ID	4674
Category	Privilege use
Description	Privileged object operation

Windows logs event ID 4674 to register that a user has a set of special privileges when the user logs in.

This log data gives the following information:

Subject:	Security ID Account Name Account Domain Logon ID
Object	Object Server Object Type Object Name Object Handle
Process Information	Process ID Process Name
Requested Operation	Desired Access Privileges

With pre-defined reports from ADAudit Plus, you can easily track and audit permissions granted on a network for users or computers to complete defined tasks.

Event 4674 applies to the following operating systems:

Audit Event ID 4674 privileged object operations and prevent unauthorized use of special privileges across your Windows environment with ADAudit Plus.