Windows Object Logging
Contents
Note: If you need to zoom in, you can click on the image.
Warning
Everything shown here is carried out in a virtualized environment that is hosted on my local machine.
How to Enable Windows Object Auditing
When you have the GUI open, you will see Computer Configuration, and User Configuration.
Under Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> Audit Policy -> Audit Object access -> Check "Define these policy settings", "Success" and "Failure".
Now, open powershell within your windows server environment. Type "Gpupdate /force". This command allow the domain to be updated with the latest rules.