You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It appears that setting an event audit policy value to No auditing resets the policy to its default value rather than disabling auditing.
For example, setting Audit account logon events to No auditing results in this:
Account Logon
Kerberos Service Ticket Operations Success
Other Account Logon Events No Auditing
Kerberos Authentication Service Success
Credential Validation Success
while setting it to Success,Failure results in this:
Account Logon
Kerberos Service Ticket Operations Success and Failure
Other Account Logon Events Success and Failure
Kerberos Authentication Service Success and Failure
Credential Validation Success and Failure
The text was updated successfully, but these errors were encountered:
silug
added a commit
to silug/local_security_policy
that referenced
this issue
Jul 2, 2020
It appears that setting an event audit policy value to
No auditing
resets the policy to its default value rather than disabling auditing.For example, setting
Audit account logon events
toNo auditing
results in this:while setting it to
Success,Failure
results in this:The text was updated successfully, but these errors were encountered: