Why is an Event ID generated for a user but not for a group?

[Windows 10]

Hello,I enabled Audit Policy through the following method:Open the Local Group Policy Editor (gpedit.msc).Navigate to Windows Settings -> Security Settings -> Advanced Audit Policy Configuration -> Object Access.Open the Audit File System policy and check "Success".Update Group Policy Settings:Run the command "gpupdate /force" in Command Prompt to apply the changes.Then I set the Audit policy for the folder and selected a group from the select a principal section. For the group, only ID 4663 is created and ID 4660 is not generated, but when I select a user instead of a group, both IDs

Continue reading...