none
Audit logs Failures RRS feed

  • Question

  • Does anyone know how to check for audit failures on windows 7 and what actions to take eg. shutdown or overwrite oldest audit record?
    Tuesday, August 27, 2019 6:11 PM

All replies

  • Hi,

    Sorry for the delayed reply.

    The security log records each event as defined by the audit policies you set on each object.

    To view the security log: 

    1. Open Event Viewer.
    2. In the console tree, expand Windows Logs, and then click Security. The results pane lists individual security events.
    3. If you want to see more details about a specific event, in the results pane, click the event.

    More information about Security auditing, please refer to: 

    https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview

    Best regards,

    Yilia 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, October 8, 2019 1:45 AM
    Moderator