| Event Id | 4909 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | The local policy settings for the TBS were changed. Old Blocked Ordinals: <Old Blocked Ordinals> New Blocked Ordinals: <New Blocked Ordinals> |
| Event Information | Cause : This event is logged when user make a change to the TPM configuration in the local policy object of the computer as opposed to GPOs in Active Directory . |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.