6144 Security policy in the Group Policy objects has been applied successfully
Written when the security settings in Group Policy objects (GPOs) are applied successfully. It is a reference event indicating the security policy took effect.
Overview
The subcategory is Audit Other Policy Change Events. It is generated when the security settings contained in GPOs are applied successfully to the machine. On error it is 6145.
How it is triggered
- When the security settings are processed successfully during a Group Policy application cycle.
Security review points
- It is normally a benign informational event. Use it to confirm security settings are applied as intended.
- If a GPO was tampered with, note that malicious settings are “applied successfully.” Together with changes to the GPO itself (5136 or 4739), evaluate the applied content.
Notes for log review
- It is a reference event that appears periodically. View it alongside whether errors 6145 appear.
- Match the applied policy content (especially weakening settings) against the GPO change history.
Key fields
| Field | Meaning |
|---|---|
| Applied GPO/settings | The reflected security settings |