![]() ![]() ![]() In the end the Account Management category should look like: Or use “ auditpol /set /category:”Account Management” /success:enable /failure:enable”. Try using “ auditpol /get/ category:*” to find out the current settings. When this setting is active, we have to configure the auditing configuration through auditpol.exe (a built-in command line utility). The reason for this is the “Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings” (wow what a setting) which is enabled. See how the setting is managed by GPO, but the setting says “no auditing”: However when dealing with Windows 2008 (or 2008 R2) domain controllers, the new fine-grained auditing settings come in play. When the domain still has Windows 2003 domain controllers, then this is as easy as setting the following setting in the domain controllers GPO: This should be set to both success and failure. Another requirement for ADMT to start migrating SIDhistory is the “Audit Account Management” setting on both source and target domain DCs. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |