Windows Local Group Policy Settings and Audit Policy Overview

The local Group Policy settings and audit policies for Windows 7 and Windows Server 2008 allow scenario providers to have more control over events and set permissions in the customer environment, so it's important to understand How to configure and use these settings and policies appropriately.

Some versions of Windows 7 (Professional, Ultimate, and Enterprise) and Windows Server 2008 support access to 53 different success and failure event audit settings. This series of articles will delve into these useful settings and explain the circumstances under which you will need to change these settings.

Figure 1 shows the basic interface of the system audit strategy. Enter "gpedit.msc" in the Windows 7 or Windows Server 2008 Start menu search bar to open the Local Group Policy Editor and display the available audit options.

Figure 1: Increased the number of 9 category records from the early Windows version to 10, with a new global project access audit (the names of other categories have also changed slightly).

If you use Windows 7 Basic, Start, Home or Home Premium, you will not be able to expand these categories. Because the audit controls under these categories are not available in these versions of the operating system. However, the benefit of being able to use all categories is that all sub-category options can be audited, and the rest of this article will discuss these sub-category setup options, so even if you use these systems, reading this knowledge is very beneficial to you.

Account Login

Figure 2: This figure shows the available properties window in the right-click menu of a sub-category, which is the four sub-accounts in the account login audit control. One of the categories.

You need to check the success or failure checkbox to audit any actual event. Check the "Configure" dialog, as shown, all you can do is select one or two checkboxes. For more information on creating and implementing advanced audit policy configurations in a domain environment, visit the Technet article. For more information on audit policy settings, please visit the Technet Security Audit Policy Reference.