auditpol listauditpol list

适用于: Windows Server (半年通道) ,Windows Server 2019,Windows Server 2016,Windows Server 2012 R2,Windows Server 2012Applies to: Windows Server (Semi-Annual Channel), Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

列出审核策略类别和子类别,或者列出为其定义每用户审核策略的用户。Lists audit policy categories and subcategories, or lists users for whom a per-user audit policy is defined.

若要对每个用户的策略执行列出操作,你必须对安全描述符中的该对象集具有 "读取" 权限。To perform list operations on the per-user policy, you must have Read permission for that object set in the security descriptor. 如果有 "管理审核和安全日志 (") 用户权限,还可以执行列表操作。You can also perform list operations if you have the Manage auditing and security log (SeSecurityPrivilege) user right. 但是,此权限允许执行整体 列表 操作所不需要的其他访问权限。However, this right allows additional access that is not necessary to perform the overall list operations.

语法Syntax

auditpol /list
[/user|/category|subcategory[:<categoryname>|<{guid}>|*]]
[/v] [/r]

参数Parameters

参数Parameter 说明Description
/user/user 检索为其定义了每用户审核策略的所有用户。Retrieves all users for whom the per-user audit policy has been defined. 如果与/v 参数一起使用,则还会显示用户的安全标识符 (SID) 。If used with the /v parameter, the security identifier (SID) of the user is also displayed.
/category/category 显示系统理解的类别名称。Displays the names of categories understood by the system. 如果与/v 参数一起使用,则还会显示类别全局唯一标识符 (GUID) 。If used with the /v parameter, the category globally unique identifier (GUID) is also displayed.
/subcategory/subcategory 显示子类别的名称及其关联的 GUID。Displays the names of subcategories and their associated GUID.
/v/v 显示具有类别或子类别的 GUID,或与/user 一起使用时显示每个用户的 SID。Displays the GUID with the category or subcategory, or when used with /user, displays the SID of each user.
/r/r 以逗号分隔的值( (CSV) 格式的报表形式显示输出。Displays the output as a report in comma-separated value (CSV) format.
/?/? 在命令提示符下显示帮助。Displays help at the command prompt.

示例Examples

若要列出具有定义的审核策略的所有用户,请键入:To list all users who have a defined audit policy, type:

auditpol /list /user

若要列出具有定义的审核策略及其关联 SID 的所有用户,请键入:To list all users who have a defined audit policy and their associated SID, type:

auditpol /list /user /v

若要以报表格式列出所有类别和子类别,请键入:To list all categories and subcategories in report format, type:

auditpol /list /subcategory:* /r

若要列出详细跟踪和 DS 访问类别的子类别,请键入:To list the subcategories of the detailed Tracking and DS Access categories, type:

auditpol /list /subcategory:detailed Tracking,DS Access

其他参考Additional References