How can I enable auditing of base objects?

John Savill

December 21, 1999

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A. To enable auditing of base objects perform the following:

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa

  3. From the Edit menu select New - DWORD value. Enter a name of AuditBaseObjects. click OK

  4. Double click the new value and set to 1

You can also turn on full privilege auditing (but this will fill your eventlog):

  1. Start the registry editor (regedit.exe)

  2. Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa

  3. From the Edit menu select New - DWORD value. Enter a name of FullPrivilegeAuditing. click OK

  4. Double click the new value and set to 1

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like