6.0 KiB
6.0 KiB
| 1 | Machine Name | Policy Target | Subcategory | Subcategory GUID | Inclusion Setting | Exclusion Setting | Setting Value |
|---|---|---|---|---|---|---|---|
| 2 | DESKTOP-M3CMQU3 | System | IPsec Driver | {0CCE9213-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 3 | DESKTOP-M3CMQU3 | System | System Integrity | {0CCE9212-69AE-11D9-BED3-505054503030} | Success and Failure | 3 | |
| 4 | DESKTOP-M3CMQU3 | System | Security System Extension | {0CCE9211-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 5 | DESKTOP-M3CMQU3 | System | Security State Change | {0CCE9210-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 6 | DESKTOP-M3CMQU3 | System | Other System Events | {0CCE9214-69AE-11D9-BED3-505054503030} | Success and Failure | 3 | |
| 7 | DESKTOP-M3CMQU3 | System | Group Membership | {0CCE9249-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 8 | DESKTOP-M3CMQU3 | System | User / Device Claims | {0CCE9247-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 9 | DESKTOP-M3CMQU3 | System | Network Policy Server | {0CCE9243-69AE-11D9-BED3-505054503030} | Success and Failure | 3 | |
| 10 | DESKTOP-M3CMQU3 | System | Other Logon/Logoff Events | {0CCE921C-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 11 | DESKTOP-M3CMQU3 | System | Special Logon | {0CCE921B-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 12 | DESKTOP-M3CMQU3 | System | IPsec Extended Mode | {0CCE921A-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 13 | DESKTOP-M3CMQU3 | System | IPsec Quick Mode | {0CCE9219-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 14 | DESKTOP-M3CMQU3 | System | IPsec Main Mode | {0CCE9218-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 15 | DESKTOP-M3CMQU3 | System | Account Lockout | {0CCE9217-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 16 | DESKTOP-M3CMQU3 | System | Logoff | {0CCE9216-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 17 | DESKTOP-M3CMQU3 | System | Logon | {0CCE9215-69AE-11D9-BED3-505054503030} | Success and Failure | 3 | |
| 18 | DESKTOP-M3CMQU3 | System | Handle Manipulation | {0CCE9223-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 19 | DESKTOP-M3CMQU3 | System | Central Policy Staging | {0CCE9246-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 20 | DESKTOP-M3CMQU3 | System | Removable Storage | {0CCE9245-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 21 | DESKTOP-M3CMQU3 | System | Detailed File Share | {0CCE9244-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 22 | DESKTOP-M3CMQU3 | System | Other Object Access Events | {0CCE9227-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 23 | DESKTOP-M3CMQU3 | System | Filtering Platform Connection | {0CCE9226-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 24 | DESKTOP-M3CMQU3 | System | Filtering Platform Packet Drop | {0CCE9225-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 25 | DESKTOP-M3CMQU3 | System | File Share | {0CCE9224-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 26 | DESKTOP-M3CMQU3 | System | Application Generated | {0CCE9222-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 27 | DESKTOP-M3CMQU3 | System | Certification Services | {0CCE9221-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 28 | DESKTOP-M3CMQU3 | System | SAM | {0CCE9220-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 29 | DESKTOP-M3CMQU3 | System | Kernel Object | {0CCE921F-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 30 | DESKTOP-M3CMQU3 | System | Registry | {0CCE921E-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 31 | DESKTOP-M3CMQU3 | System | File System | {0CCE921D-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 32 | DESKTOP-M3CMQU3 | System | Other Privilege Use Events | {0CCE922A-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 33 | DESKTOP-M3CMQU3 | System | Non Sensitive Privilege Use | {0CCE9229-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 34 | DESKTOP-M3CMQU3 | System | Sensitive Privilege Use | {0CCE9228-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 35 | DESKTOP-M3CMQU3 | System | RPC Events | {0CCE922E-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 36 | DESKTOP-M3CMQU3 | System | Token Right Adjusted Events | {0CCE924A-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 37 | DESKTOP-M3CMQU3 | System | Process Creation | {0CCE922B-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 38 | DESKTOP-M3CMQU3 | System | Process Termination | {0CCE922C-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 39 | DESKTOP-M3CMQU3 | System | Plug and Play Events | {0CCE9248-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 40 | DESKTOP-M3CMQU3 | System | DPAPI Activity | {0CCE922D-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 41 | DESKTOP-M3CMQU3 | System | Other Policy Change Events | {0CCE9234-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 42 | DESKTOP-M3CMQU3 | System | Authentication Policy Change | {0CCE9230-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 43 | DESKTOP-M3CMQU3 | System | Audit Policy Change | {0CCE922F-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 44 | DESKTOP-M3CMQU3 | System | Filtering Platform Policy Change | {0CCE9233-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 45 | DESKTOP-M3CMQU3 | System | Authorization Policy Change | {0CCE9231-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 46 | DESKTOP-M3CMQU3 | System | MPSSVC Rule-Level Policy Change | {0CCE9232-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 47 | DESKTOP-M3CMQU3 | System | Other Account Management Events | {0CCE923A-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 48 | DESKTOP-M3CMQU3 | System | Application Group Management | {0CCE9239-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 49 | DESKTOP-M3CMQU3 | System | Distribution Group Management | {0CCE9238-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 50 | DESKTOP-M3CMQU3 | System | Security Group Management | {0CCE9237-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 51 | DESKTOP-M3CMQU3 | System | Computer Account Management | {0CCE9236-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 52 | DESKTOP-M3CMQU3 | System | User Account Management | {0CCE9235-69AE-11D9-BED3-505054503030} | Success | 1 | |
| 53 | DESKTOP-M3CMQU3 | System | Directory Service Replication | {0CCE923D-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 54 | DESKTOP-M3CMQU3 | System | Directory Service Access | {0CCE923B-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 55 | DESKTOP-M3CMQU3 | System | Detailed Directory Service Replication | {0CCE923E-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 56 | DESKTOP-M3CMQU3 | System | Directory Service Changes | {0CCE923C-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 57 | DESKTOP-M3CMQU3 | System | Other Account Logon Events | {0CCE9241-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 58 | DESKTOP-M3CMQU3 | System | Kerberos Service Ticket Operations | {0CCE9240-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 59 | DESKTOP-M3CMQU3 | System | Credential Validation | {0CCE923F-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 60 | DESKTOP-M3CMQU3 | System | Kerberos Authentication Service | {0CCE9242-69AE-11D9-BED3-505054503030} | No Auditing | 0 | |
| 61 | DESKTOP-M3CMQU3 | Option:CrashOnAuditFail | Disabled | 0 | |||
| 62 | DESKTOP-M3CMQU3 | Option:FullPrivilegeAuditing | Disabled | 0 | |||
| 63 | DESKTOP-M3CMQU3 | Option:AuditBaseObjects | Disabled | 0 | |||
| 64 | DESKTOP-M3CMQU3 | Option:AuditBaseDirectories | Disabled | 0 |