Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion Setting,Setting Value
DESKTOP-M3CMQU3,System,IPsec Driver,{0CCE9213-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,System Integrity,{0CCE9212-69AE-11D9-BED3-505054503030},Success and Failure,,3
DESKTOP-M3CMQU3,System,Security System Extension,{0CCE9211-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Security State Change,{0CCE9210-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Other System Events,{0CCE9214-69AE-11D9-BED3-505054503030},Success and Failure,,3
DESKTOP-M3CMQU3,System,Group Membership,{0CCE9249-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,User / Device Claims,{0CCE9247-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Network Policy Server,{0CCE9243-69AE-11D9-BED3-505054503030},Success and Failure,,3
DESKTOP-M3CMQU3,System,Other Logon/Logoff Events,{0CCE921C-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Special Logon,{0CCE921B-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,IPsec Extended Mode,{0CCE921A-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,IPsec Quick Mode,{0CCE9219-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,IPsec Main Mode,{0CCE9218-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Account Lockout,{0CCE9217-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Logoff,{0CCE9216-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Logon,{0CCE9215-69AE-11D9-BED3-505054503030},Success and Failure,,3
DESKTOP-M3CMQU3,System,Handle Manipulation,{0CCE9223-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Central Policy Staging,{0CCE9246-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Removable Storage,{0CCE9245-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Detailed File Share,{0CCE9244-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Other Object Access Events,{0CCE9227-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Filtering Platform Connection,{0CCE9226-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Filtering Platform Packet Drop,{0CCE9225-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,File Share,{0CCE9224-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Application Generated,{0CCE9222-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Certification Services,{0CCE9221-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,SAM,{0CCE9220-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Kernel Object,{0CCE921F-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Registry,{0CCE921E-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,File System,{0CCE921D-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Other Privilege Use Events,{0CCE922A-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Non Sensitive Privilege Use,{0CCE9229-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Sensitive Privilege Use,{0CCE9228-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,RPC Events,{0CCE922E-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Token Right Adjusted Events,{0CCE924A-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Process Creation,{0CCE922B-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Process Termination,{0CCE922C-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Plug and Play Events,{0CCE9248-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,DPAPI Activity,{0CCE922D-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Other Policy Change Events,{0CCE9234-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Authentication Policy Change,{0CCE9230-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Audit Policy Change,{0CCE922F-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Filtering Platform Policy Change,{0CCE9233-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Authorization Policy Change,{0CCE9231-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,MPSSVC Rule-Level Policy Change,{0CCE9232-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Other Account Management Events,{0CCE923A-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Application Group Management,{0CCE9239-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Distribution Group Management,{0CCE9238-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Security Group Management,{0CCE9237-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Computer Account Management,{0CCE9236-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,User Account Management,{0CCE9235-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP-M3CMQU3,System,Directory Service Replication,{0CCE923D-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Directory Service Access,{0CCE923B-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Detailed Directory Service Replication,{0CCE923E-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Directory Service Changes,{0CCE923C-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Other Account Logon Events,{0CCE9241-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Kerberos Service Ticket Operations,{0CCE9240-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Credential Validation,{0CCE923F-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,System,Kerberos Authentication Service,{0CCE9242-69AE-11D9-BED3-505054503030},No Auditing,,0
DESKTOP-M3CMQU3,,Option:CrashOnAuditFail,,Disabled,,0
DESKTOP-M3CMQU3,,Option:FullPrivilegeAuditing,,Disabled,,0
DESKTOP-M3CMQU3,,Option:AuditBaseObjects,,Disabled,,0
DESKTOP-M3CMQU3,,Option:AuditBaseDirectories,,Disabled,,0