How can I enable auditing of base objects?
John Savill
December 21, 1999
1 Min Read
A. To enable auditing of base objects perform the following:
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa
From the Edit menu select New - DWORD value. Enter a name of AuditBaseObjects. click OK
Double click the new value and set to 1
You can also turn on full privilege auditing (but this will fill your eventlog):
Start the registry editor (regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa
From the Edit menu select New - DWORD value. Enter a name of FullPrivilegeAuditing. click OK
Double click the new value and set to 1
About the Author
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
You May Also Like