"effective setting" for security settings in win2kserver localsecurity settings >> local policies >> Audit Policies

From: news.microsoft.com (rwhite_at_cascodev.com)
Date: 07/30/03 

Date: Wed, 30 Jul 2003 08:44:13 -0400

Greetings. Hoping someone can help me here.

I set up auditing for both failures and successfull policies in
localsecurity settings >> local policies >> Audit Policies (such as "audit
account logon" events).

After doing so (several days and 1 reboot after doing so to be specific),
Local Setting is set to "success, failure" but Effective setting is still
just set to failure.

I have setup auditing on the folder level but am still not receiving
successfull audit events in the security log.

I assume this is because "effective setting" is still failure only.

Does anyone know how to make my "effective setting" success and failure?

thank you,

Russ White
rwhite@cascodev.com

Relevant Pages

  • Re: Setting up security etc so Kids can play games...Need Help!!
    ... to enable auditing for access failures by users when running ... this approach involves modifying machine policy, registry ... for object access (enabling auditing for failure should be sufficient, ... modify security settings on the registry keys where failure ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Security settings
    ... to enable the system's own object access auditing feature for any ... suspected file and registry locations that might be accessed by the ... you can then modify the security settings on only those resources to ... > for object access (enabling auditing for failure should be sufficient, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event ID 577 Filing Security Logs
    ... when auditing failure is enabled for privilege use. ... have auditing of privledge use set for success and failure. ...
    (microsoft.public.windows.server.security)
  • troubleshooting 560 object access failure audit entries
    ... security policy. ... I'm auditing all of my hard disk ... partitions for for "failure" on all events, ... audit" "object access" 560 errors in my security event log. ...
    (microsoft.public.windows.server.general)
  • Auditing for deleted files
    ... Enabled audting for'object access' GP object (success and failure) ... Selected auditing on the Company folder, ...
    (microsoft.public.backoffice.smallbiz)