Event ID - 643

Event Id643
DescriptionDomain Policy Changed:
Domain: %1
Domain ID: %2
Caller User Name: %3
Caller Domain: %4
Caller Logon ID: %5
Privileges: %6
Event InformationCause:
This event record indicates that a domain policy has been changed. There is no Failure Audit form of this audit event record. Domain policy changes can have security implications. The administrator should check to make sure there are no security implications because of the change.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.