Policy category: Auditing

1. Policy setting: Raise Event ID 1: SERVICE STARTED
2. Policy setting: Raise Event ID 2: SERVICE STOPPED
3. Policy setting: Raise Event ID 3: POLICY LOADED
4. Policy setting: Raise Event ID 4: POLICY LOAD FAILED
5. Policy setting: Raise Event ID 11: LICENSE VALIDATED
6. Policy setting: Raise Event ID 12: LICENSE EXPIRES SOON HARD
7. Policy setting: Raise Event ID 13: LICENSE EXPIRES SOON SOFT
8. Policy setting: Raise Event ID 14: LICENSE EXPIRED SOFT
9. Policy setting: Raise Event ID 15: LICENSE EXPIRED HARD
10. Policy setting: Raise Event ID 16: LICENSE INVALID
11. Policy setting: Raise Event ID 17: UNMANAGED USER LOGON
12. Policy setting: Raise Event ID 21: USAGE
13. Policy setting: Raise Event ID 101: LOGON
14. Policy setting: Raise Event ID 102: RECONNECT
15. Policy setting: Raise Event ID 103: LOGOFF
16. Policy setting: Raise Event ID 104: DISCONNECT
17. Policy setting: Raise Event ID 105: PROPERTY CHANGED
18. Policy setting: Raise Event ID 106: CONTEXT CHANGED
19. Policy setting: Raise Event ID 111: UNTRUSTED DEVICE BLOCKED
20. Policy setting: Raise Event ID 112: TRUSTED DEVICE BLOCKED
21. Policy setting: Raise Event ID 113: TRUSTED DEVICE AUTO UPDATE SUCCEEDED
22. Policy setting: Raise Event ID 114: TRUSTED DEVICE AUTO UPDATE FAILED
23. Policy setting: Raise Event ID 201: CUSTOM PROCESS EXECUTED
24. Policy setting: Raise Event ID 202: CUSTOM PROCESS SUCCEEDED
25. Policy setting: Raise Event ID 203: CUSTOM PROCESS FAILED
26. Policy setting: Raise Event ID 301: ACCESS ALLOWED
27. Policy setting: Raise Event ID 302: ACCESS DENIED
28. Policy setting: Raise Event ID 303: ACCESS FAILED
29. Policy setting: Raise Event ID 304: LOGON ABORTED
30. Policy setting: Raise Event ID 311/1311: EVENT INFO
31. Policy setting: Raise Event ID 312/1312: EVENT WARNING
32. Policy setting: Raise Event ID 313/1313: EVENT ERROR
33. Policy setting: Raise Event ID 321: APPLOCKER RULE
34. Policy setting: Raise Event ID 322: APPLOCKER RULE FAILED
35. Policy setting: Raise Event ID 323: APPLOCKER POLICY
36. Policy setting: Raise Event ID 324: APPLOCKER POLICY FAILED
37. Policy setting: Raise Event ID 331: APPLICATION TERMINATED
38. Policy setting: Raise Event ID 332: APPLICATION SHUTDOWN
39. Policy setting: Raise Event ID 341: POPUP SHOWN
40. Policy setting: Raise Event ID 342: POPUP FAILED
41. Policy setting: Raise Event ID 351: REGISTRY UPDATED
42. Policy setting: Raise Event ID 352: REGISTRY WARNING
43. Policy setting: Raise Event ID 353: REGISTRY FAILED
44. Policy setting: Raise Event ID 361: PRINTER MAP
45. Policy setting: Raise Event ID 362: PRINTER MAP FAILED
46. Policy setting: Raise Event ID 363: PRINTER UNMAP
47. Policy setting: Raise Event ID 364: PRINTER UNMAP FAILED
48. Policy setting: Raise Event ID 365: PRINTER SET DEFAULT
49. Policy setting: Raise Event ID 366: PRINTER SET DEFAULT FAILED
50. Policy setting: Raise Event ID 371: APP MASKING UPDATE
51. Policy setting: Raise Event ID 372: APP MASKING UPDATE FAILED
52. Policy setting: Raise Event ID 381: SEND MAIL SUCCEEDED
53. Policy setting: Raise Event ID 382: SEND MAIL FAILED
54. Policy setting: Raise Event ID 391: WEB REQUEST SUCCEEDED
55. Policy setting: Raise Event ID 392: WEB REQUEST FAILED
56. Policy setting: Raise Event ID 401: WINDOWS FIREWALL SUCCEEDED
57. Policy setting: Raise Event ID 402: WINDOWS FIREWALL FAILED
58. Policy setting: Raise Event ID 411: DRIVE MAP
59. Policy setting: Raise Event ID 412: DRIVE MAP WARNING
60. Policy setting: Raise Event ID 413: DRIVE MAP FAILED
61. Policy setting: Raise Event ID 414: DRIVE UNMAP
62. Policy setting: Raise Event ID 415: DRIVE UNMAP FAILED
63. Policy setting: Raise Event ID 421: SHORTCUT CREATION
64. Policy setting: Raise Event ID 422: SHORTCUT CREATION FAILED
65. Policy setting: Raise Event ID 423: SHORTCUT DELETION
66. Policy setting: Raise Event ID 424: SHORTCUT DELETION FAILED
67. Policy setting: Raise Event ID 431: USER SESSION
68. Policy setting: Raise Event ID 432: USER SESSION FAILED

Policy setting: Raise Event ID 1: SERVICE STARTED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 2: SERVICE STOPPED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 3: POLICY LOADED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 4: POLICY LOAD FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 11: LICENSE VALIDATED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 12: LICENSE EXPIRES SOON HARD

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 13: LICENSE EXPIRES SOON SOFT

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 14: LICENSE EXPIRED SOFT

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 15: LICENSE EXPIRED HARD

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 16: LICENSE INVALID

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 17: UNMANAGED USER LOGON

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 21: USAGE

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is disabled.

Policy setting: Raise Event ID 101: LOGON

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 102: RECONNECT

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 103: LOGOFF

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 104: DISCONNECT

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 105: PROPERTY CHANGED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 106: CONTEXT CHANGED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 111: UNTRUSTED DEVICE BLOCKED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 112: TRUSTED DEVICE BLOCKED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 113: TRUSTED DEVICE AUTO UPDATE SUCCEEDED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 114: TRUSTED DEVICE AUTO UPDATE FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 201: CUSTOM PROCESS EXECUTED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 202: CUSTOM PROCESS SUCCEEDED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 203: CUSTOM PROCESS FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 301: ACCESS ALLOWED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 302: ACCESS DENIED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 303: ACCESS FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 304: LOGON ABORTED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 311/1311: EVENT INFO

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 312/1312: EVENT WARNING

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 313/1313: EVENT ERROR

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 321: APPLOCKER RULE

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 322: APPLOCKER RULE FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 323: APPLOCKER POLICY

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 324: APPLOCKER POLICY FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 331: APPLICATION TERMINATED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 332: APPLICATION SHUTDOWN

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 341: POPUP SHOWN

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 342: POPUP FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 351: REGISTRY UPDATED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 352: REGISTRY WARNING

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 353: REGISTRY FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 361: PRINTER MAP

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 362: PRINTER MAP FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 363: PRINTER UNMAP

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 364: PRINTER UNMAP FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 365: PRINTER SET DEFAULT

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 366: PRINTER SET DEFAULT FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 371: APP MASKING UPDATE

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 372: APP MASKING UPDATE FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 381: SEND MAIL SUCCEEDED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 382: SEND MAIL FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 391: WEB REQUEST SUCCEEDED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 392: WEB REQUEST FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 401: WINDOWS FIREWALL SUCCEEDED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 402: WINDOWS FIREWALL FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 411: DRIVE MAP

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 412: DRIVE MAP WARNING

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 413: DRIVE MAP FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 414: DRIVE UNMAP

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 415: DRIVE UNMAP FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 421: SHORTCUT CREATION

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 422: SHORTCUT CREATION FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 423: SHORTCUT DELETION

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 424: SHORTCUT DELETION FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 431: USER SESSION

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.

Policy setting: Raise Event ID 432: USER SESSION FAILED

Determines whether the event is raised within the Windows Event Log.

• When ENABLED, deviceTRUST will write the event to the Windows Event Log when appropriate.

• When DISABLED, deviceTRUST will not write the event to the Windows Event Log.

The default behavior is enabled.