Audit Other Privilege Use Events

Applies to

  • Windows 10
  • Windows Server 2016

This auditing subcategory should not have any events in it, but for some reason Success auditing will enable generation of event 4985(S): The state of a transaction has changed.

Computer Type General Success General Failure Stronger Success Stronger Failure Comments
Domain Controller No No No No This auditing subcategory doesn’t have any informative events inside.
Member Server No No No No This auditing subcategory doesn’t have any informative events inside.
Workstation No No No No This auditing subcategory doesn’t have any informative events inside.

Events List:

  • 4985(S): The state of a transaction has changed.