Monitor and Server Health Group

 View Only

Monitor Pack (MS6) - Windows - Monitor Audit Policy 

May 22, 2009 01:52 PM

Monitor pack for monitor Solution 6 (conversion to monitor Solution 7 in progress)

It is very important to monitor the Audit policy in order to prevent a rogue administrator from turning auditing off, performing a forbidden action, and turning auditing back on.
You would be monitoring the following events for changes to your Audit Policy:

  • 608 User Right Assigned
  • 609 User Right Removed
  • 610 New Trusted Domain
  • 611 Removing Trusted Domain
  • 612 Audit Policy Change

Statistics
0 Favorited
0 Views
1 Files
0 Shares
0 Downloads
Attachment(s)
zip file
Windows - Monitor Audit Policy.zip   49 KB   1 version
Uploaded - Feb 25, 2020

Tags and Keywords

Related Entries and Links

No Related Resource entered.