Export (0) Print
Expand All

Auditpol clear

Updated: April 17, 2012

Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2, Windows Vista

Deletes the per-user audit policy for all users, resets (disables) the system audit policy for all subcategories, and sets all the auditing options to disabled.

For examples of how this command can be used, see Examples.

Auditpol /clear [/y]

 

Parameter Description

/y

Suppresses the prompt to confirm if all audit policy settings should be cleared.

/?

Displays help at the command prompt.

For clear operations for the per-user policy and system policy, you must have Write or Full Control permission on that object set in the security descriptor. You can also perform the clear operation by possessing the Manage auditing and security log (SeSecurityPrivilege) user right. However, this right allows additional access that is not necessary to perform the clear operation.

To delete the per-user audit policy for all users, reset (disable) the system audit policy for all subcategories, and set all the audit policy settings to disabled, at a confirmation prompt, type:

Auditpol /clear

To delete the per-user audit policy for all users, reset the system audit policy settings for all subcategories, and set all the audit policy settings to disabled, without a confirmation prompt, type:

Auditpol /clear /y
noteNote
The preceding example is useful when using a script to perform this operation.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft