Audit Policy Settings Under Local Policies\Audit Policy

Applies To: Windows 7, Windows Server 2003, Windows Server 2008 R2, Windows Vista

The security audit policy settings under Security Settings\Local Policies\Audit Policy provide broad security audit capabilities for client computers and servers that cannot use advanced security audit policy settings. This includes all client computers running Windows XP and servers running Windows Server 2003. In addition, unless you use logon scripts to apply security audit policy, only the basic local audit policy settings can be applied to client computers running Windows Vista and servers running Windows Server 2008.

The basic audit policy settings under Security Settings\Local Policies\Audit Policy are:

• Audit account logon events

• Audit account management

• Audit directory service access

• Audit logon events

• Audit object access

• Audit policy change

• Audit privilege use

• Audit process tracking

• Audit system events