Audit Policy Change -- Audit Failure Event


  • Hi,

     I was configure to log audit policy change failure events only.

    Computer Configuration -> Windows Settings -> Security Settings -> Advanced Audit Policy Configuration -> System Audit Policies -> Policy Change -> "Audit Audit Policy Change" with "Failure"

    I Need to conform the failure event logs or not.  After setting this policy to failure, i did't get any failure Logs.

    In which scenario we will get Failure log for Audit Policy Change.

    Thank You,

    Friday, February 17, 2017 12:24 PM

All replies