Re: Registry keys for EventLog audit events

From: Frank Heyne (fh@rcs.urz.tu-dresden.de)
Date: 04/22/02

Previous message: Ken Seitz: "RE: Microsoft Cluster in DMZ - Need Advice"
In reply to: H C: "Registry keys for EventLog audit events"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: "Frank Heyne" <fh@rcs.urz.tu-dresden.de>
To: focus-ms@securityfocus.com, keydet89@yahoo.com
Date: Mon, 22 Apr 2002 18:35:25 +0200

On 21 Apr 2002, at 6:11, H C wrote:

> Are the events to be audited by the EventLog
> (Logon/Logoff success and failure, etc) stored in the
> Registry? If so, does anyone know the path to the
> key?

Every time I change an audit policy, the binary value of
HKLM\Security\Policy\PolAdtEv
changes as well ;-)

Frank Heyne

Previous message: Ken Seitz: "RE: Microsoft Cluster in DMZ - Need Advice"
In reply to: H C: "Registry keys for EventLog audit events"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]