Export (0) Print
Expand All

Auditpol restore

Published: April 17, 2012

Updated: April 17, 2012

Applies To: Windows 7, Windows 8, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Vista

Restores system audit policy settings, per-user audit policy settings for all users, and all auditing options from a file that is syntactically consistent with the comma-separated value (CSV) file format used by the /backup option.

For examples of how this command can be used, see Examples.

Auditpol /restore /file:<filename>

 

Parameter Description

/file

Specifies the file from which the audit policy should be restored. The file must have been created by using the /backup option or must be syntactically consistent with the CSV file format used by the /backup option.

/?

Displays help at the command prompt.

For restore operations for the per-user policy and system policy, you must have Write or Full Control permission on that object set in the security descriptor. You can also perform the restore operation by possessing the Manage auditing and security log (SeSecurityPrivilege) user right. SeSecurityPrivilege is useful when restoring the security descriptor in the event of an inadvertent error or malicious attack.

To restore system audit policy settings, per-user audit policy settings for all users, and all auditing options from a file named Auditpolicy.csv that was created by using the /backup command, type:

Auditpol /restore /file:c:\auditpolicy.csv

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft