diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 05ec05440b..914bf6b9a3 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -343,6 +343,188 @@ The following diagram shows the Policy configuration service provider in tree fo +### Audit policies + +
+
+ Audit/AccountLogonLogoff_AuditAccountLockout +
+
+ Audit/AccountLogonLogoff_AuditGroupMembership +
+
+ Audit/AccountLogonLogoff_AuditIPsecExtendedMode +
+
+ Audit/AccountLogonLogoff_AuditIPsecMainMode +
+
+ Audit/AccountLogonLogoff_AuditIPsecQuickMode +
+
+ Audit/AccountLogonLogoff_AuditLogoff +
+
+ Audit/AccountLogonLogoff_AuditLogon +
+
+ Audit/AccountLogonLogoff_AuditNetworkPolicyServer +
+
+ Audit/AccountLogonLogoff_AuditOtherLogonLogoffEvents +
+
+ Audit/AccountLogonLogoff_AuditSpecialLogon +
+
+ Audit/AccountLogonLogoff_AuditUserDeviceClaims +
+
+ Audit/AccountLogon_AuditCredentialValidation +
+
+ Audit/AccountLogon_AuditKerberosAuthenticationService +
+
+ Audit/AccountLogon_AuditKerberosServiceTicketOperations +
+
+ Audit/AccountLogon_AuditOtherAccountLogonEvents +
+
+ Audit/AccountManagement_AuditApplicationGroupManagement +
+
+ Audit/AccountManagement_AuditComputerAccountManagement +
+
+ Audit/AccountManagement_AuditDistributionGroupManagement +
+
+ Audit/AccountManagement_AuditOtherAccountManagementEvents +
+
+ Audit/AccountManagement_AuditSecurityGroupManagement +
+
+ Audit/AccountManagement_AuditUserAccountManagement +
+
+ Audit/DSAccess_AuditDetailedDirectoryServiceReplication +
+
+ Audit/DSAccess_AuditDirectoryServiceAccess +
+
+ Audit/DSAccess_AuditDirectoryServiceChanges +
+
+ Audit/DSAccess_AuditDirectoryServiceReplication +
+
+ Audit/DetailedTracking_AuditDPAPIActivity +
+
+ Audit/DetailedTracking_AuditPNPActivity +
+
+ Audit/DetailedTracking_AuditProcessCreation +
+
+ Audit/DetailedTracking_AuditProcessTermination +
+
+ Audit/DetailedTracking_AuditRPCEvents +
+
+ Audit/DetailedTracking_AuditTokenRightAdjusted +
+
+ Audit/ObjectAccess_AuditApplicationGenerated +
+
+ Audit/ObjectAccess_AuditCentralAccessPolicyStaging +
+
+ Audit/ObjectAccess_AuditCertificationServices +
+
+ Audit/ObjectAccess_AuditDetailedFileShare +
+
+ Audit/ObjectAccess_AuditFileShare +
+
+ Audit/ObjectAccess_AuditFileSystem +
+
+ Audit/ObjectAccess_AuditFilteringPlatformConnection +
+
+ Audit/ObjectAccess_AuditFilteringPlatformPacketDrop +
+
+ Audit/ObjectAccess_AuditHandleManipulation +
+
+ Audit/ObjectAccess_AuditKernelObject +
+
+ Audit/ObjectAccess_AuditOtherObjectAccessEvents +
+
+ Audit/ObjectAccess_AuditRegistry +
+
+ Audit/ObjectAccess_AuditRemovableStorage +
+
+ Audit/ObjectAccess_AuditSAM +
+
+ Audit/PolicyChange_AuditAuthenticationPolicyChange +
+
+ Audit/PolicyChange_AuditAuthorizationPolicyChange +
+
+ Audit/PolicyChange_AuditFilteringPlatformPolicyChange +
+
+ Audit/PolicyChange_AuditMPSSVCRuleLevelPolicyChange +
+
+ Audit/PolicyChange_AuditOtherPolicyChangeEvents +
+
+ Audit/PolicyChange_AuditPolicyChange +
+
+ Audit/PrivilegeUse_AuditNonSensitivePrivilegeUse +
+
+ Audit/PrivilegeUse_AuditOtherPrivilegeUseEvents +
+
+ Audit/PrivilegeUse_AuditSensitivePrivilegeUse +
+
+ Audit/System_AuditIPsecDriver +
+
+ Audit/System_AuditOtherSystemEvents +
+
+ Audit/System_AuditSecurityStateChange +
+
+ Audit/System_AuditSecuritySystemExtension +
+
+ Audit/System_AuditSystemIntegrity +
+
+ ### Authentication policies