even logs / auditing

R

Randy

I am trying to create an automated script (inf/reg file)
to define auditing levels. I am looking for a KB article
that tells me what the definitions for the event levels
are. e.g.

what's the difference between AuditSystemEvents=1 and
AuditSystemEvents=3.

I know I've seen this before. I just cannot find it.
Can someone help me out. I've searched for specific
names, I've searched for audit, I've tried "success and
failure", and I'm coming up empty.

Thanks for your help.
:Randy
 
C

Curtis Clay III [MSFT]

Hello Randy,

AuditSystemEvents=0 equals off

AuditSystemEvents=1 equals Success

AuditSystemEvents=2 equals Failure

AuditSystemEvents=3 equals Success and Failure.

This posting is provided "AS IS" with no warranties, and confers no rights.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Auditing ? 1
auditing logon failures 1
Audit Logon Events vs. Audit Account Logon Events 1
Auditing file deletions only 3
Auditing Object success 1
Win2K Auditing / Security Event Log Problems 2
Auditing object access from network 5
Auditing Logons and Logoffs 1

Top