Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

 

Configuring the audit policies

Manual process

Configure the audit policies manually using the steps below:

  1. Using domain admin credentials, log in to any computer that has the Group Policy Management Console (GPMC) on it.

    Note: The GPMC will not be installed in workstations and/or enabled in member servers by default. Hence, we recommend configuring audit policies in Windows domain controllers.

  2. Go to Start > Windows Administrative Tools > Group Policy Management.
  3. In the GPMC, select Domains and choose the domain you want to configure Group Policy for. Select Domain Controller, right-click the Default Domain Controllers Policy, and select Edit.
  4. In the Group Policy Management Editor, follow the steps below:

    Note: Advanced audit policy configuration will only be available in Windows Server 2008 or later. If you have an older version of Windows, configure legacy audit policies.

  5. Group Policy Management Editor

    Advanced audit policies

  6. Choose Computer configuration > Policies > Windows Settings > Security settings > Advanced Audit Policy Configuration > Audit Policies.
  7. Click, enable, and save the audit policies as shown below:

  8. Advanced audit policy Audit events
    Category Subcategory  
    DS Access
    Audit Directory Service Access
    Audit Directory Service Changes
    Success
    Group Policy Management Editor

    Local audit policies

    • 5. Choose Computer configuration > Policies > Windows Settings > Security Settings > Local Policies > Audit Policies.
    • 6. Click, enable, and save the audit policies as shown below:

    • Local audit policy Audit events
      Category  
      Audit directory service access Success
    Group Policy Management Editor

ADAudit Plus Trusted By