mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-09 02:57:22 +00:00
39 lines
2.5 KiB
Markdown
39 lines
2.5 KiB
Markdown
---
|
||
title: Basic security audit policy settings (Windows 10)
|
||
description: Basic security audit policy settings are found under Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Audit Policy.
|
||
ms.assetid: 31C2C453-2CFC-4D9E-BC88-8CE1C1A8F900
|
||
ms.prod: w10
|
||
ms.mktglfcycl: deploy
|
||
ms.sitesec: library
|
||
ms.pagetype: security
|
||
author: brianlic-msft
|
||
ms.date: 04/19/2017
|
||
---
|
||
|
||
# Basic security audit policy settings
|
||
|
||
**Applies to**
|
||
- Windows 10
|
||
|
||
Basic security audit policy settings are found under Computer Configuration\\Windows Settings\\Security Settings\\Local Policies\\Audit Policy.
|
||
|
||
## In this section
|
||
|
||
| Topic | Description |
|
||
| - | - |
|
||
| [Audit account logon events](basic-audit-account-logon-events.md) | Determines whether to audit each instance of a user logging on to or logging off from another device in which this device is used to validate the account.|
|
||
| [Audit account management](basic-audit-account-management.md) | Determines whether to audit each event of account management on a device.|
|
||
| [Audit directory service access](basic-audit-directory-service-access.md) | Determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified.|
|
||
| [Audit logon events](basic-audit-logon-events.md) | Determines whether to audit each instance of a user logging on to or logging off from a device. |
|
||
| [Audit object access](basic-audit-object-access.md) | Determines whether to audit the event of a user accessing an object--for example, a file, folder, registry key, printer, and so forth--that has its own system access control list (SACL) specified.|
|
||
| [Audit policy change](basic-audit-policy-change.md) | Determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies. |
|
||
| [Audit privilege use](basic-audit-privilege-use.md) | Determines whether to audit each instance of a user exercising a user right. |
|
||
| [Audit process tracking](basic-audit-process-tracking.md) | Determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access.|
|
||
| [Audit system events](basic-audit-system-events.md) | Determines whether to audit when a user restarts or shuts down the computer or when an event occurs that affects either the system security or the security log. |
|
||
|
||
## Related topics
|
||
|
||
- [Basic security audit policy settings](basic-security-audit-policy-settings.md)
|
||
|
||
|