Overview#

Windows Security Log Event is an Event which is placed in the Microsoft Windows that is considered to be security related.

The events are not listed anywhere we could find on Microsoft's sites but we did find: Windows Security Log Events Generally LDAPWiki is most interested in Microsoft Active Directory events

LDAP Microsoft Active Directory and LDS diagnostic event logging#

To enable LDAP Microsoft Active Directory and LDS diagnostic event logging modify the Windows registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters REG_DWORD to:

• 16 which is LDAP Interface Events
• set the Logging Level to "2"

More Information#

There might be more information for this subject on one of the following:

• Elevated Token
• Event 2886
• Event 2887
• Event 2888
• Event 2889
• Event 4624
• Event 4625
• Event 4673
• LDAP Signing
• System Access Control List
• Windows Logon
• Windows Logon Types
• Windows Security Event Log
• Windows Security Log Event

---

• [#1] - Windows Security Log Events - based on information obtained 2018-04-09
• [#2] - How to configure Active Directory and LDS diagnostic event logging - based on information obtained 2020-01-22