Enabling Auditing
Auditing is not enabled when you configure the auditing entries of a file or a folder. You enable auditing through audit policy. After enabling auditing, the system looks after the audit settings.
To enable auditing:
1. Select Start > Programs > AdmInistrative Tools > ActIve Directory Users and Computers. The Active Directory Users and Computers console appears.
2. Right-click the Domain. A shortcut menu appears.
3. Select Properties. The Properties dialog box appears.
4. Click the Group Policy tab. The Group Policy tab appears.
The different options available in the Group Policy tab are:
> New - Enables to create a new group policy
> Add - Displays the Add a Group Policy Object Link dialog box that enables to add the required group policy
> Edit- Displays the Group Policy and enables to edit the selected policyOptions - Displays the Default Domain Policy Options and enables to select the required option
> Delete - Enables to delete the selected domain policy> Properties - Displays the Properties dialog of the selected domain policy
> Block Policy inheritance - Enables to prevent the inheritance of policy to the linked domain
5. Select Default Domain Policy.
6. Click Edit. The Group Policy Object Editor window appears.
7. Expand Computer Configuration.
8. Expand Windows Settings.
9. Expand Security Settings.
10. Expand Local Policies.
11. Click Audit Policy. A list of Audit Policies appears in the detail pane.
12. Double-click Audit Object Access from the detail pane. The Audit object access Properties dialog box appears
13. Select Define these policy settings.
14. Select Success option to audit all successful attempts.
15. Select Failure option to audit all unsuccessful attempts.
16. Click OK.

0 comments:
Post a Comment