The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.

Press CTRL+K to open search

Enabling the module to monitor task scheduler jobs or COM+ objects

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next

You can use Event Streamer to monitor Task Scheduler jobs or COM+ objects (Event Ids 4698, 4699, 4702). Enable Audit Other Object Access Events in a group policy.

  1. Launch the local group policy editor (gpedit.msc).

  2. Navigate to Computer Configuration > Windows Settings > Security Settings > Advanced Audit Policy Configuration > Object Access. Various subcategories of audit events are displayed.

  3. Right-click Audit Other Object Access Events and then select Properties.

  4. Select the Configure the following audit events, Success, and Failure checkboxes and then click Apply.

:
Related articles