Windows EventInformation
Windows Event ID 4867 – Security-Auditing: Certificate Services Template Security Descriptor Modified
Event ID 4867 fires when security permissions on a certificate template are modified in Active Directory Certificate Services, indicating changes to who can request or manage certificates.
