.png)
Security Auditing
Updated: January 25, 2010
Applies To: Windows Server 2008, Windows Server 2008 R2
Security auditing is one of the most powerful tools to help maintain the security of your system. As part of your overall security strategy, you should determine the level of auditing appropriate for your environment. Auditing should identify attacks, either successful or not, that pose a threat to your network, or attacks against resources that you have determined to be valuable in your risk assessment.
-
Advanced Security Audit Policy Step-by-Step Guide
This step-by-step guide for Windows Server 2008 R2 and Windows 7 demonstrates the process of setting up an advanced audit policies infrastructure in a test environment. During this process, you will create an Active Directory domain, install Windows Server 2008 R2 on a member server, install Windows 7 on a client computer, and configure two advanced audit policies. -
Advanced Security Auditing FAQ
This topic lists common questions and their answers about understanding, deploying, and managing security audit policies. -
Which Versions of Windows Support Advanced Audit Policy Configuration?
This page provides information about the versions of Windows that support advanced audit policy configuration and special considerations that apply to various tasks associated with auditing enhancements.
-
Planning and Deploying Advanced Security Audit Policies
This document explains the options that security policy planners must consider and the tasks they must complete to deploy an effective security audit policy in a network that includes computers running Windows 7 or Windows Server 2008 R2.
-
Security Audit Policy Reference
This reference provides information about the auditing settings available in Windows Server 2008 R2 and Windows 7 and the audit events that they generate.
-
Auditpol
This page provides syntax and examples for using the Auditpol command-line tool, which can be used to display information about and performs functions to manipulate audit policies.
-
Security Audit Events for Windows 7 and Windows Server 2008 R2
-
Security audit events for Windows Server 2008 and Windows Vista
-
AD DS: Auditing
This page describes new auditing capabilities in Active Directory Domain Services (AD DS). -
AD DS Auditing Step-by-Step Guide
This page shows how to log old and new values when changes are made to Active Directory objects and their attributes. -
Security Monitoring and Attack Detection Planning Guide
This guide describes how to plan a security monitoring system on Windows-based networks. -
How to use Group Policy to configure detailed security auditing settings for Windows Vista-based and Windows Server 2008-based computers in a Windows Server 2008 domain, in a Windows Server 2003 domain, or in a Windows 2000 domain
This article describes how to use Group Policy to configure security auditing settings for Windows Vista-based or Windows Server 2008-based computers in a Windows Server 2003 domain or in a Windows 2000 domain. Windows Vista and Windows Server 2008 let you manage audit policies at a more detailed level by using audit policy subcategories. This article describes a procedure that administrators can use to deploy a custom audit policy that applies detailed security auditing settings for computers that are running Windows Vista or Windows Server 2008.
