4.2 Example Involving Per-User Audit Subcategory Settings

In the following example, an administrator specifies that the designated audit settings be applied for computers to which a certain GPO applies:

  • Include made successful attempts for File System for user S-1-5-21-2127521184-1604012920-1887927527-123456.

  • Exclude made failed attempts for File System for user S-1-5-21-2127521184-1604012920-1887927527-123456.

      
     Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion Setting,Setting Value
     TEST-MACHINE,S-1-5-21-2127521184-1604012920-1887927527-123456,File System,{0CCE921D-69AE-11D9-BED3-505054503030},Success,Failure,9