Event ID 619 – Quality of Service Policy Changed
Event ID 619 is logged when there is a change in the Quality of Service policy. The QoS Policy acts as a central point of management for network bandwidth across the entire Active Directory infrastructure. The QoS profile settings are shared with the Group Policy.
This log data provides the following information:
- User Name
- Domain Name
- Logon ID
- Changes Made
Why does event ID 619 need to be monitored?
Latency sensitive and mission critical applications compete with lower priority traffic for network bandwidth. Policy-based QoS enables the control of the available network, based on applications, users, and computers. Thus, any changes made to the QoS Policy need to be monitored, and if they are unplanned or unauthorized, must be investigated immediately.
ADAudit Plus helps you avoid the GPOs monitoring complexities with real-time pre-configured reports and auditing of the changes along with alerts within a Domain & OU. The advanced Group Policy settings real-time audit reports highlight the elusive change details, and also provide the old and new values of the modified attributes.
Event 619 applies to the following operating systems:
- Windows Server 2000
- Windows 2003 and XP