Command Line for changing auditing on the C: Drive RRS feed

  • Question

  • I have a security guideline that says I have to enable auditing on the C: drive of all my workstations. It needs to be set to Type: Fail Name:Everyone Access: Full Control  Apply To: This folder, subfolder and files.

    Is there anyway to do this with the command line so I can put it in a patch file.


    Thursday, October 20, 2011 7:07 PM

All replies

  • The command-line tool used to set per-user auditing policy for selective auditing is auditusr.
    You can get help using the auditusr command by executing auditusr /? in a command prompt window.


    Luigi Bruno - Microsoft Community Contributor 2011 Award
    Thursday, October 20, 2011 10:25 PM
  • Hello,

    Do you have a clear exemple of this command line auditusr.exe ?

    I would like to export all the categories for all the local users.


    Friday, November 29, 2013 8:36 AM