Audit the access of global system objects

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

Description

Determines whether access of global system objects will be audited.

When this policy is enabled, it causes system objects such as mutexes, events, semaphores, and DOS Devices to be created with a default system access control list (SACL). If the Audit object access audit policy is also enabled, then access to these system objects will be audited.

This policy is defined by default in Local Computer Policy where it is disabled by default.