Local Security Policy problem - Need Help

From: Patrick Lawler (plawler_at_coolthings.org)
Date: 01/31/04 

Date: Fri, 30 Jan 2004 21:17:09 -0700

I'm trying to enable auditing on my XP Home User Computer. The instructions
for doing so, that I've listed below, do not bring me to where I should be.
When I go to ADMINISTRATIVE TOOLS as stated, I do not see the LOCAL SECURITY
POLICY choice. Can someone tell me another way to do this or am I missing
some part of my operating system that allows me to do this?
Thanks
Patrick
Instructions
To enable auditing on a computer running Windows Server 2003, Windows XP, or
Windows 2000

  1.. Open the Control Panel.
  2.. In Control Panel, double-click Administrative Tools, and then click
Local Security Policy.
  3.. In Local Security Settings, double-click Local Policies, double-click
Audit Policy, and then click the events that you want to audit. We recommend
that you audit the following events:
    Audit account logon events (Success, Failure)

    Audit account management (Success, Failure)

    Audit directory service access (Failure)

    Audit logon events (Success, Failure)

    Audit object access (Failure)

    Audit policy change (Success, Failure)

    Audit system events (Success, Failure)

To enable auditing on a computer running Windows NTŪ 4.0

  1.. Click Start, point to Programs, point to Administrative Tools, and
then click User Manager.
  2.. Click the Audit logon events policy, and then click the events that
you want to monitor. We recommend that you audit the following events:
    Logon and Logoff (Success, Failure)

    File and Object Access (Failure)

    User and Group Management (Success, Failure)

    Security Policy Changes (Success, Failure)

    Restart, Shutdown, and System (Success, Failure)

Relevant Pages

  • Re: Event ID 560 (Object Name: BaseNamedObjectsRasPbFile )
    ... Go to group policy or local security policy and disable the security option ... "Audit the access of global system objects", ...
    (microsoft.public.win2000.security)
  • Re: Security log problems Please Help!!
    ... Disable the setting "audit the use of base system objects" in Local Security ... Policy or group policy, and disable privilege use success & failure auditing ...
    (microsoft.public.win2000.security)
  • RE: Auditing file deletion
    ... regarding this in the security event log. ... Default Domain Controllers Policy. ... Click Computer Configuration, double-click Windows Settings, ... double-click Audit Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Auditing file deletion
    ... The problem is that hundreds of other Object Access events get logged, ... just the file and directory deletions. ... Default Domain Controllers Policy. ... double-click Audit Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: I need a Step-by-Step to set up file deletion Auditing on SBS...
    ... Default Domain Controllers Policy. ... Right-click Domain Controllers, click Properties. ... Click Computer Configuration, double-click Windows Settings, double-click ... Audit Policy. ...
    (microsoft.public.windows.server.sbs)