ARond Messaging

  • Increase font size
  • Default font size
  • Decrease font size

2.4 Setting Audit Policies

Email
In this video i will setup audit policies.


 
In this lab, you will set audit policies in the GPO editor.
  1. Select Start > Administrative Tools > Security and expand the Local Computer Policy snap-in.
  2. Expand the folders as follows: Computer Configuration, Windows Settings, Security Settings, Local Policies, Audit Policy.
  3. Open the Audit Account Logon Events policy. In the Local Policy Setting field, under Audit These Attempts, check the boxes for Success and Failure. Click the OK button.
  4. Open the Audit Account Management policy. In the Local Policy Setting field, under Audit These Attempts, check the boxes for Success and Failure. Click the OK button.
  5. The simulator will automatically generate three failed logon attempts. Open the MMC and expand the Event Viewer snap-in.
  6. From Event Viewer, open the security log. You should see the audited events listed in this log.