CREATING A GROUP POLICY OBJECT IN THIS PROCEDURE, YOU CREATE A NEW GPO...

10. Configure the remaining audit policies using the following settings:

Audit Account Management—Success and Failure

Audit Directory Service Access—Success and Failure

Audit Logon Events—Success and Failure

Audit Object Access—Success and Failure

Audit Policy Change—Success and Failure

Audit Privilege Use—Failure only

Audit Process Tracking—No auditing

Audit System Events—Success and Failure

You are configuring the Audit Process Tracking policy to audit neither successes

nor failures because of the large number of log entries this policy creates. How-

ever, you should still select the Define These Policy Settings check box in the

Audit Process Tracking Properties dialog box, leaving the Success and Failure

check boxes cleared, to ensure that the configuration you want overrides any

existing settings for that policy.