Skip to content

Commit 0e70b8d

Browse files
Merge pull request #4368 from martin77s/main
Update configure-windows-event-collection.md
2 parents 8f5d129 + e147c23 commit 0e70b8d

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

ATPDocs/deploy/configure-windows-event-collection.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -235,15 +235,16 @@ To configure domain object auditing:
235235

236236
Now, all relevant changes to directory services appear as 4662 events when they're triggered.
237237

238-
1. Repeat the steps in this procedure, but for **Applies to**, select the following object types:
238+
1. Repeat the steps in this procedure, but for **Applies to**, select the following object types <sup>1</sup>
239239
- **Descendant Group Objects**
240240
- **Descendant Computer Objects**
241241
- **Descendant msDS-GroupManagedServiceAccount Objects**
242242
- **Descendant msDS-ManagedServiceAccount Objects**
243-
- **Descendant msDS-DelegatedManagedServiceAccount Objects**
243+
- **Descendant msDS-DelegatedManagedServiceAccount Objects** <sup>2</sup>
244244

245245
> [!NOTE]
246-
> Assigning the auditing permissions on **All descendant objects** would also work, but you need only the object types detailed in the last step.
246+
> 1. Assigning the auditing permissions on **All descendant objects** would also work, but you need only the object types detailed in the last step.
247+
> 2. The **msDS-DelegatedManagedServiceAccount** class is relevant only for domains running at least one Windows Server 2025 domain controller.
247248
248249
## Configure auditing on AD FS
249250

0 commit comments

Comments
 (0)