A list of all possible security events in the Windows Security Event Log


This may be old news, but it is a handy reference for OpsMgr admins, when asked to monitor for specific events from security event logs:

 

Windows Server 2003:  http://technet.microsoft.com/en-us/library/cc163121.aspx

Windows Server 2008:  http://www.microsoft.com/download/en/details.aspx?id=17871

Windows Server 2008 R2:  http://www.microsoft.com/download/en/details.aspx?id=21561

Comments (5)

  1. Michael De Witte says:

    http://www.microsoft.com/…/details.aspx for windows 2012 server

  2. shashindra says:

    Thanks Michael For sharing Security Audit Events for 2012 R2

  3. Thomas Schneider says:

    Do you also have the link for Windows 10 or Windows Server 2016. What will be the best search string to find it more easy in future?

  4. Paul Roberts says:

    Here’s the one for Windows 8 / Svr 2012 (includes those from predecessors):
    https://www.microsoft.com/en-gb/download/details.aspx?id=35753

    I got this by Googling for: "Security Audit Events for Windows site:microsoft.com"

  5. Taha Ansari says:

    For latest list check:
    http://www.microsoft.com/en-us/download/details.aspx?id=50034

    This spreadsheet details the security audit events for Windows.