detection.wiki

Microsoft-Windows-GroupPolicy › Event 1500

Event ID 1500 — The Group Policy settings for the computer were processed successfully.

Provider
Microsoft-Windows-GroupPolicy
Channel
System
Level
Informational
Opcode
Start

Description

The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.

Message #

The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy.

Fields #

NameDescription
SupportInfo1 UInt32—
SupportInfo2 UInt32—
ProcessingMode UInt32—
ProcessingTimeInMilliseconds UInt32—
DCName UnicodeString—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-GroupPolicy",
    "guid": "AEA1B4FA-97D1-45F2-A64C-4D69FFFD92C9",
    "event_source_name": "",
    "event_id": 1500,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 1,
    "keywords": 9223372036854775808,
    "time_created": "2023-11-05T22:44:13.952441+00:00",
    "event_record_id": 1973,
    "correlation": {
      "ActivityID": "73911CA3-27B1-475D-92EC-CBFA1D10EB35"
    },
    "execution": {
      "process_id": 1132,
      "thread_id": 2268
    },
    "channel": "System",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-18"
    }
  },
  "event_data": {
    "SupportInfo1": 1,
    "SupportInfo2": 4214,
    "ProcessingMode": 0,
    "ProcessingTimeInMilliseconds": 156,
    "DCName": ""
  },
  "message": ""
}

References #