Skip to main content
NetApp Knowledge Base

High number of Microsoft event ID 4670: "Permissions on an object were changed" seen in audit logs

Views:
203
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • CIFS auditing 

Issue

After enabling CIFS auditing, the logs show many Microsoft event ID 4670: "Permissions on an object were changed"

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

Scan to view the article on your device