Windows 10: Why is ID 4660 not being generated?

Hello,First I did the following method:Open the Local Group Policy Editor gpedit.msc.Navigate to Windows Settings -> Security Settings -> Advanced Audit Policy Configuration -> Object Access.Open the Audit File System policy and check "Success".Run the command "gpupdate /force" in Command Prompt to apply the changes.Then I enabled Audit policy on a folder to delete subfolders and files, but when I delete a folder or a file, only ID 4663 is generated. Why?Thank you.

:)

 

Windows Event 4660

Hello Everyone,

I'm trying actually to create a detection rule with Windows event 4660 to track any deleted object, file, directory or something like that. I know that this event is logged when an object is deleted. I checked that all the advanced audit policies are configured to Success and Failure to be able to collect the events, but when :

1. I created a new registry key and deleted it after that, event 4660 has not been logged;
   
2. I tried to deleted system registry keys but same thing;
   
3. I tried to delete files and directories but also same thing.
   

I want to know, why this event code is not generated ? Did I miss something or do something wrong ?

Need your help.

Thanks in advance.

 

how do I get machine id for activation purposes?

Hi Fred,

Machine ID also known as Product ID is being used to identify the device. We suggest following the steps below to get the product ID of your device:

• Type about your PC on the search box.
• Look for the Product ID.

Get back to us if you need further assistance.

 

'Generic PnP monitor' issue

Hello Angelica,

I would suggest you follow steps to update the monitor driver:

Press Windows + X keys

Choose Device manager

Click on Monitors

Right click on ‘Generic PnP monitor’ and click on update driver

Tap on Browse my computer for driver software

Tap on Let me pick from a list of available drivers

Choose ‘Generic PnP monitor’ and tap on Next

When you are done please restart the computer.