Object-Access4656 A handle to an object was requested4657 A registry value was modified4658 The handle to an object was closed4660 An object was deleted4661 A handle to an AD/SAM object was requested4662 An operation was performed on an object4663 An attempt was made to access an object4664 An attempt was made to create a hard link4670 Permissions on an object were changed4671 An application attempted to access a blocked ordinal through the TBS4690 An attempt was made to duplicate a handle to an object4691 Indirect access to an object was requested4818 Proposed Central Access Policy does not grant the same access as the current one4985 The state of a transaction has changed5039 A registry key was virtualized5051 A file was virtualized5140 A network share object was accessed5142 A network share object was added5143 A network share object was modified5144 A network share object was deleted5145 A network share object was checked for desired access (detailed file share)5148 WFP detected a DoS attack and entered a defensive mode5149 The DoS attack has subsided and normal processing is being resumed5168 SPN check for SMB/SMB2 failed5712 A Remote Procedure Call (RPC) was attempted5888 An object in the COM+ Catalog was modified5889 An object was deleted from the COM+ Catalog5890 An object was added to the COM+ Catalog6416 A new external device was recognized by the System6419 A request was made to disable a device6420 A device was disabled6421 A request was made to enable a device6422 A device was enabled6423 The installation of this device is forbidden by system policy6424 The installation of this device was allowed, after previously being forbidden by policy