mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-13 05:47:23 +00:00
74 lines
2.2 KiB
Markdown
74 lines
2.2 KiB
Markdown
---
|
||
title: WindowsSecurityAuditing CSP
|
||
description: The WindowsSecurityAuditing configuration service provider (CSP) is used to enable logging of security audit events. This CSP was added in Windows 10, version 1511.
|
||
ms.assetid: 611DF7FF-21CE-476C-AAB5-3D09C1CDF08A
|
||
ms.author: maricia
|
||
ms.topic: article
|
||
ms.prod: w10
|
||
ms.technology: windows
|
||
author: MariciaAlforque
|
||
ms.date: 06/26/2017
|
||
---
|
||
|
||
# WindowsSecurityAuditing CSP
|
||
|
||
|
||
The WindowsSecurityAuditing configuration service provider (CSP) is used to enable logging of security audit events. This CSP was added in Windows 10, version 1511.
|
||
|
||
The following diagram shows the WindowsSecurityAuditing configuration service provider in tree format.
|
||
|
||
|
||
|
||
<a href="" id="windowssecurityauditing"></a>**WindowsSecurityAuditing**
|
||
Root node.
|
||
|
||
<a href="" id="configurationsettings"></a>**ConfigurationSettings**
|
||
Interior node for handling all the audit configuration settings. Do not use the Get operation in this node. It is only used of grouping configuration settings.
|
||
|
||
<a href="" id="configurationsettings-enablesecurityauditing"></a>**ConfigurationSettings/EnableSecurityAuditing**
|
||
Specifies whether to enable or disable auditing for the device.
|
||
|
||
Value type is boolean. If true, a default set of audit events will be captured to a log file for upload; if false, auditing is disabled and events are not logged. Default value is false.
|
||
|
||
Supported operations are Get and Replace.
|
||
|
||
## Examples
|
||
|
||
|
||
Enable logging of audit events.
|
||
|
||
``` syntax
|
||
<SyncML xmlns="SYNCML:SYNCML1.2">
|
||
<SyncBody>
|
||
<Replace>
|
||
<CmdID>1</CmdID>
|
||
<Item>
|
||
<Target>
|
||
<LocURI>
|
||
./Vendor/MSFT/WindowsSecurityAuditing/ConfigurationSettings/EnableSecurityAuditing
|
||
</LocURI>
|
||
</Target>
|
||
<Meta>
|
||
<Format xmlns="syncml:metinf">bool</Format>
|
||
<Type>text/plain</Type>
|
||
</Meta>
|
||
<Data>true</Data>
|
||
</Item>
|
||
</Replace>
|
||
<Final/>
|
||
</SyncBody>
|
||
</SyncML>
|
||
```
|
||
|
||
For more information about Windows security auditing, see [What's new in security auditing](https://technet.microsoft.com/itpro/windows/whats-new/security-auditing).
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|