From the course: Windows 11: Security

Unlock the full course today

Join today to access over 24,700 courses taught by industry experts.

Using Group Policy to audit actions in Window 11

Using Group Policy to audit actions in Window 11 - Windows Tutorial

From the course: Windows 11: Security

Using Group Policy to audit actions in Window 11

- [Instructor] Now let's look at using group policy to configure some of the auditing of a Windows 11 PC. Off the start menu, I'll type in group policy which gives me the option to edit group policy, and that'll open up the local group policy editor. In the navigation tree to the left, I'm going to need to drill down a few levels. So under Computer Configuration, I'll open up Windows Settings, then I'll open Security Settings. Then I'll open Local Policies and I'll select Audit Policy. And this will show me about half a dozen options for editing the local audit policy. One of the first ones we'll look at is audit log on events. So I'll double click on that, and it'll bring up the audit log on events properties window. And I basically have two choices, I can audit successful logins and/or I can audit log on failures. To me, both of these are interesting. Login successes tells me who is accessing my computer, and login…

Contents