A New Vista Security Policy on Audit:Force Audit Policy Subcategor

10-19-2007

SCENoApplyLegayAuditPolicy is the registry Value that stored the value of the
Security Policy Audit: Force Audit policy subcategory settings(Windows Vista
or later) to override audit policy category settings

There are 3 instances of this Registry value on a Vista machine. What do
each of these correspond to?
eg.Under
1. HKEY_LOCAL_MACHINE\System\CurrentControlSet001\Control\Lsa
2. HKEY_LOCAL_MACHINE\System\CurrentControlSet002\Control\Lsa
3. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa

Which instance is the one that stores the value as set in
Group Policy object Editor for
Local Computer Policy:Security Settings\Local Policies\Security
Options\Audit: Force audit policy subcategory settings(Windows Vista or
later) to override audit policy category settings?

10-19-2007

On Fri, 19 Oct 2007 06:11:01 -0700, Gayle wrote:

	Quote:
	> SCENoApplyLegayAuditPolicy is the registry Value that stored the value of the > Security Policy Audit: Force Audit policy subcategory settings(Windows Vista > or later) to override audit policy category settings > > There are 3 instances of this Registry value on a Vista machine. What do > each of these correspond to? > eg.Under > 1. HKEY_LOCAL_MACHINE\System\CurrentControlSet001\Control\Lsa > 2. HKEY_LOCAL_MACHINE\System\CurrentControlSet002\Control\Lsa > 3. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa > > Which instance is the one that stores the value as set in > Group Policy object Editor for > Local Computer Policy:Security Settings\Local Policies\Security > Options\Audit: Force audit policy subcategory settings(Windows Vista or > later) to override audit policy category settings?

http://support.microsoft.com/kb/100010

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
Any given program will expand to fill available memory.

10-19-2007	#1 (permalink)
Gayle Guest n/a posts	A New Vista Security Policy on Audit:Force Audit Policy Subcategor SCENoApplyLegayAuditPolicy is the registry Value that stored the value of the Security Policy Audit: Force Audit policy subcategory settings(Windows Vista or later) to override audit policy category settings There are 3 instances of this Registry value on a Vista machine. What do each of these correspond to? eg.Under 1. HKEY_LOCAL_MACHINE\System\CurrentControlSet001\Control\Lsa 2. HKEY_LOCAL_MACHINE\System\CurrentControlSet002\Control\Lsa 3. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa Which instance is the one that stores the value as set in Group Policy object Editor for Local Computer Policy:Security Settings\Local Policies\Security Options\Audit: Force audit policy subcategory settings(Windows Vista or later) to override audit policy category settings?
My System Specs

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Force user account picture w/Group Policy	DevilsPGD	Vista account administration	0	05-29-2008 10:00 PM
Re: Security Event Log Audit Failure 5038 in Vista SP1 tcpip.sys	greg	Vista General	0	05-17-2008 06:48 PM
Security Event Log Audit Failure 5038 in Vista SP1 tcpip.sys	greg	Vista General	0	05-17-2008 05:42 PM
How to audit installed Vista updates?	Joe Morris	Vista General	4	11-19-2007 02:20 PM
Strange security audit events	drahnier	Vista security	0	10-13-2006 03:06 AM