set "Audit Logon Events" in registry?

[Jonas Andersson]

Hello!

I'm developing an application, that will use the eventlog to check for
logon events. To make the application more userfriendly, I would like
to turn this setting on from within my application.
So, where are these settings stored? In the registry or in a file?
The setting I'm interested in is:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Audit Policy\Audit Logon Events

Thank you in advance!

/Jonas Andersson

 

[Torgeir Bakken (MVP)]

I'm developing an application, that will use the eventlog to check for
logon events. To make the application more userfriendly, I would like
to turn this setting on from within my application.
So, where are these settings stored? In the registry or in a file?
The setting I'm interested in is:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\Audit Policy\Audit Logon Events

Hi

It's in registry, but it isn't exactly easy to access ;-)

See tip 5231 ("How do I determine the Windows 2000 Audit Policy using the
registry?") here:

http://www.jsiinc.com/reghack.htm