#event-id-4621

1 article

Windows Events1

Windows security monitoring dashboard showing Event Viewer with EFS security events and encryption status

Event 4621

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4621 – LSA: Administrator Recovery Agent Policy Changed

Event ID 4621 fires when the Administrator Recovery Agent policy for Encrypting File System (EFS) is modified, indicating changes to data recovery capabilities on the system.

March 189 min