Summary

Completed

During this module, you learned how to enable auditing. You learned that using auditing enables you to perform forensic analysis, verify regulatory compliance, monitor user activity, and troubleshoot your Windows Server environment. You also learned that auditing the ongoing activity on your network is a critical security practice. You now know that auditing events related to security enables you to get early notice of potential malicious activity and evidence if a breach has occurred.

Now that you have reviewed this module, you should be able to:

  • Audit Windows Server events.

  • Configure Windows Server to record diagnostic information.

Resources

Use these resources to discover more.