In this video i will setup
audit policies.
In this lab, you will set audit policies in the GPO editor.
- Select Start > Administrative Tools > Security and expand the Local Computer Policy snap-in.
- Expand the folders as follows: Computer Configuration, Windows Settings, Security Settings, Local Policies, Audit Policy.
- Open the Audit Account Logon Events policy. In the Local Policy Setting field, under Audit These Attempts, check the boxes for Success and Failure. Click the OK button.
- Open the Audit Account Management policy. In the Local Policy Setting field, under Audit These Attempts, check the boxes for Success and Failure. Click the OK button.
- The simulator will automatically generate three failed logon attempts. Open the MMC and expand the Event Viewer snap-in.
- From Event Viewer, open the security log. You should see the audited events listed in this log.