 |
 |
Rule Check: Advanced Audit Policy Setting (Windows)
The Windows advanced security audit policy allows fine-grained control over what events on a server should be logged for auditing purposes. Only logged events will be viewable in the Windows Event Viewer.
The Advanced Audit Policy Setting check verifies whether a given advanced security audit policy setting (or audit subcategory) has the value that you expect on a scanned Windows server. Using the check in a configuration policy allows you verify that the audit events you want to log are in fact being logged.
This one check allows you verify the desired setting of any one of over 50 advanced audit policy settings.
| Parameters | Description |
|---|---|
| Audit Subcategory |
The name of the advanced security audit policy setting to check. Select it from the drop-down list. |
| Desired value |
Select the value or values that are acceptable for this setting. You can select multiple values:
|
| Remedial Suggestion (optional) |
Optional suggestion |
Comments
0 comments
Please sign in to leave a comment.