From the course: Windows 10: Security

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Using Group Policy to audit actions in Window 10

Using Group Policy to audit actions in Window 10 - Windows Tutorial

From the course: Windows 10: Security

Start my 1-month free trial Buy for my team

Using Group Policy to audit actions in Window 10

“

- [Instructor] Now let's look at using group policy to configure some of the auditing of a Windows 10 PC. Again, I'm in Local Group Policy Editor. Under the Local Computer Policy under Computer Configuration, I'm going to open up Windows Settings. Under that I'll open up Security Settings. Under that I'll open up Local Policies, and in there we find Audit Policy. The top one is Audit Account Logon Events. If I double-click on that, I'm given the option to either audit successful logon attempts, audit failed login attempts, or audit both. And typically on most of my computers, I like to audit both. I audit the success because I want to know who's logging into my computer and I audit the failure because I want to know who tried to log into my computer and failed. Both of those are interesting to me. So I'll hit Apply and okay. The other one I'd like to demonstrate is Audit Object Access. And for now I'm going to…

Contents