8.3. Inside Auditing With and Without Group Policy

Auditing is a powerful tool. It can help you determine when people are doing things they shouldn't as well as help you determine when people are doing things they should.

But here's the trick: some auditing occurs when you use Group Policy to turn it on. But apparently someone within the Windows Server 2008 team didn't get that memo. So there's some newly expanded stuff you can audit for in Windows Server 2008, except you don't use Group Policy to turn it on.

Grr.

We'll first examine the auditing possibilities with Group Policy; that is, the stuff you can actually audit when you use Group Policy to enable the auditing. Then, we'll talk about auditing Group Policy itself.

Finally, we'll review ...

Get Group Policy: Fundamentals, Security, and Troubleshooting now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.