Re: Cannot modify audit policy

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Martin Maat wrote:

Hi,

My system event log is flooded with 538, 540 and 576 events. This issue has been addressed on several web pages but the presented solution is no good to me because... I cannot change the settings under

Group Policy Object Editor
Local Computer Policy
Computer Configuration
Windows Settings
Security Settings
Local Policy
Audit Policy

I have Audit Logon events set to auditing of both success and failure and I want to disable auditing for these events but Group Policy Object Editor won't let me. There is no checkbox before "Audit these attempts:" and both checkboxes for Success and Failure are disabled.

I am logged on as administrator, the machine is a Windows Server 2003 SBS domain controller. In "Default Domain Controller Security Settings" I can change these settings, all auditing is set to "No auditing" here.

Can anyone help?

You should use Group Policy Results in Group Policy Management, and run the GPR Wizard for the server (you can skip user settings).

It will show you that logon auditing is specified in the GPO "Small Business Server Auditing Policy".

Note that auditing logons is the default setting, and there's not usually a good reason to change this. The presence of the relevant log entries is expected.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
SSL Certificates, Domains, etc.: https://netshop.virtual-isp.net
.

Relevant Pages

  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problems configuring security for services
    ... Note that to enable logging of access to files or registry settings, ... auditing settings on individual folders or registry keys in the NTFS ...
    (microsoft.public.win2000.security)
  • Re: group policy scrolling marquee
    ... Policy at the same time a great robust platform for configuration management ... is launced via one of the four events available through Group Policy but the ... to store their settings in one of two places. ... > As for the Marquee screen saver you'll note that the settings (including ...
    (microsoft.public.win2000.group_policy)
  • Re: File sharing
    ... When you run rsop.msc you will get a report screen showing Group Policy ... connections/Windows Firewall and what settings from what Group Policy. ... setting to accept connections on the local subnet plus connections from my ...
    (microsoft.public.windowsxp.security_admin)