Advanced security audit policies

Applies to

  • Windows 10

Advanced security audit policy settings are found in Security Settings\Advanced Audit Policy Configuration\System Audit Policies and appear to overlap with basic security audit policies, but they are recorded and applied differently. When you apply basic audit policy settings to the local computer by using the Local Security Policy snap-in, you are editing the effective audit policy, so changes made to basic audit policy settings will appear exactly as configured in Auditpol.exe. In Windows 7 and later, advanced security audit policies can be controlled by using Group Policy.

In this section

Topic Description
Planning and deploying advanced security audit policies This topic for the IT professional explains the options that security policy planners must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes advanced security audit policies
Advanced security auditing FAQ This topic for the IT professional lists questions and answers about understanding, deploying, and managing security audit policies.
Using advanced security auditing options to monitor dynamic access control objects This guide explains the process of setting up advanced security auditing capabilities that are made possible through settings and events that were introduced in Windows 8 and Windows Server 2012.
Advanced security audit policy settings This reference for IT professionals provides information about the advanced audit policy settings that are available in Windows and the audit events that they generate.