Hi, looking information to know what are the generated events when I open a file, I've find the following: 4656, 4663 and 4658. My question is that, these events are generated not only when I open a file but also when I open a folder and the files are listed. So, how can we exactly know when a file is opened? Thanks in advance. Regards

Hi, Please share us the whole event information. Does these event logs affect the normal performance? If not, you can ignore these event logs. Some of event logs are generated as the normal behavior. Best Regards DalePlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks for your answer. I've checked thart it's impossible to know when the event id 4656 is related to the opening of a file or related to the normal performance or my AD. Regards