Implementing Group Policy to enable security logs on client computers

[19832matts]

Does anyone know how to enable a group policy that enforces security event logging on client computers(local machines)?

Any suggestions are greatly appreciated!

 

[IllogicallyLogical]

It depends on what particular events you are trying to log. There are various security events that can be logged so I will give you some information on what you can do and point you where to enable the policies.

Open the Group Policy Editor (Start> Run> type gpedit.msc) and navigate to...

Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy

Look at the various audit policies and decide what you want to log. Information about what the various audit policies log and how to configure them is provided in the link below.

- Chapter 3: Audit Policy

http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch03n.mspx

Joey
A+, Network+, MCP, Wireless#

 

[linney]

Threats and Countermeasures
Chapter 3: Audit Policy

http://www.microsoft.com/technet/security/guidance/serversecurity/tcg/tcgch03n.mspx