Skip to main content
NetApp Knowledge Base

High number of Microsoft event ID 4670: "Permissions on an object were changed" seen in audit logs

Views:
96
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

 

Applies to

  • ONTAP 9
  • CIFS auditing 

Issue

After enabling CIFS auditing, the logs show many Microsoft event ID 4670: "Permissions on an object were changed"

 

CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support