Use the AuditPol tool to review the current Audit Policy configuration:
Open a Command Prompt with elevated privileges ("Run as Administrator").
Enter "AuditPol /get /category:*".
Compare the AuditPol settings with the following. If the system does not audit the following, this is a finding:
| Fix Text (F-105231r1_fix) |
|---|
| Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Advanced Audit Policy Configuration >> System Audit Policies >> Policy Change >> “Audit MPSSVC Rule-Level Policy Change" with "Success" selected. |
Scope, Define, and Maintain Regulatory Demands Online in Minutes.
10161 Park Run Drive, Suite 150
Las Vegas, Nevada 89145
PHONE 702.776.9898
FAX 866.924.3791
info@unifiedcompliance.com
© 2018 Network Frontiers LLC
All right reserved.