The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Enabling the module to monitor task scheduler jobs or COM+ objects

Prev Next

You can use Event Streamer to monitor Task Scheduler jobs or COM+ objects (Event Ids 4698, 4699, 4702). Enable Audit Other Object Access Events in a group policy.

  1. Launch the local group policy editor (gpedit.msc).

  2. Navigate to Computer Configuration > Windows Settings > Security Settings > Advanced Audit Policy Configuration > Object Access. Various subcategories of audit events are displayed.

  3. Right-click Audit Other Object Access Events and then select Properties.

  4. Select the Configure the following audit events, Success, and Failure checkboxes and then click Apply.