Re: Audit problem

From: Steve Cartwright [MS] (scart@online.microsoft.com)
Date: 04/01/03 

From: "Steve Cartwright [MS]" <scart@online.microsoft.com>
Date: Tue, 1 Apr 2003 12:57:51 -0800

I expect you need to enable auditing as follows for the group policy
double click on Computer Configuration > Windows Settings
when windows settings has expanded double click on Security Settings
when Security Settings has expanded double click Local Policies
when Local Policies has expanded double click on Audit Policy.
the policy window will fill witht he various objects that you can set.

Double clicking any object will open it up and you can define what auditing
you require.

You can perform similar operations for the Local Security Policy Settings as
well.

Hope that this is what you need

"Leônidas" <:}> wrote in message
news:Osd1SFG9CHA.2044@TK2MSFTNGP10.phx.gbl...
> I configure auditing in folder that i want but i delete, modify... and
> no recods in Event Viewer. When i delete, modify in server he make a
log....
> I try to enable de auditing in the gpedit.msc but i can't find
> Security\LocalPolicy\AuditPolicy - ObjectAccess??
> See image
> please help me
>
> Sorry, my bad english.
>
> --
>
> "Ondrej Sevecek" <ondra@sevecek.com> wrote in message
> news:#0nhNJY8CHA.2044@TK2MSFTNGP10.phx.gbl...
> > Have you enabled auditing in Local Policies\Computer
> > Configuration\Security\LocalPolicy\AuditPolicy - ObjectAccess??
> > Start gpedit.msc to gain access to these settings.
> >
> > Ondra.
> >
> >
> > "Ken" <k.wong@mail.hongkong.com> wrote in message
> > news:247c01c2ef8d$db0091b0$a001280a@phx.gbl...
> > > Hello all,
> > >
> > > I enable object access audit setting and apply all audit
> > > options in a directory in order that I log all events
> > > inside that directory. But, when I move a directory
> > > inside that specified audited directory, I cannot find any
> > > records in the security log. I am surprise that I've
> > > already enabled all options but it still can't log the
> > > move action. Any suggestions? TIA.
> > >
> > > Ken
> >
> >
>
>
>

Relevant Pages

  • Re: Default Domain Controllers Policy reverts to previous settings
    ... I don't think it's a good idea to use the setting "Enforce Policy" for the DDP and the DDCP, if Auditing is defined it the DDP it will take precedence over all other Audit settings from any other GPO expect if a Policy is linked more closely to the object and also have the "Enforce Policy" flag set. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Multi line text box in adm template?
    ... text like "Computer Configuration \ Windows Settings \ Security ... In many cases if you see mutltipe input boxes within a single policy item, ...
    (microsoft.public.windows.group_policy)
  • Help Meeeeeeeeeee
    ... default domain policy, computer config, windows settings, ... disable Password must meet complexity requirements. ...
    (microsoft.public.windows.server.general)
  • Re: Password expiration
    ... If it is only a workgroup server run gpedit.msc from the run line. ... There go to computer configuration, windows settings, security settings, account policies,Password policy. ...
    (microsoft.public.windows.server.security)
  • Re: scripted logon
    ... Why can't you launch all the scripts from a Group Policy based Logon script. ... Here's the policy settings (I sure hope word wrap doesn't mess it up too ... Windows Components/Windows Installer ...
    (microsoft.public.windows.terminal_services)