1.1.3.2.2 Enable 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings'

Information

Set 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' to 'Enabled'
This policy setting allows administrators to enable the more precise auditing capabilities present in Windows Vista.

Solution

Make sure 'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is set to enabled.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12, CSCv6|6.2

Plugin: Windows

Control ID: 7d9243988f03ee3633490e2689b2ace2c74ddfcacab97af750c5fea1257920eb