Object Auditing
-
In episode 16, you mentioned about object auditing for Group Policy. I was wondering what would happen if you turned on auditing on the folder but did not enable auditing in the GPO. Would the auditing take place? And if so, how does it differ from when I would enable the GP for auditing?
Thank you in advance,
Chris -
Christopher,
You must do both to object auditing.
If you turn on auditing on the folder but do not enable auditing in the GPO, auditing will not take place. You must enable it on the server via group policy--domain or local. You must then configure auditing on the resource's SACL.
Cordially,
Ronnie Wong,
Host, ITProTV