Audit: Audit the use of Backup and Restore privilege This security setting determines whether to audit the use of all user ...

Audit: Audit the use of Backup and Restore privilege

This security setting determines whether to audit the use of all user privileges, including Backup and Restore, when the Audit privilege use policy is in effect. Enabling this option when the Audit privilege use policy is also enabled generates an audit event for every file that is backed up or restored.

If you disable this policy, then use of the Backup or Restore privilege is not audited even when Audit privilege use is enabled.

Note: On Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Enabling this setting can cause a LOT of events, sometimes hundreds per second, during a backup operation.

Default: Disabled.

Audit registry global object access This policy setting allows you to apply a global object access audit policy to the registry ... Audit Security Object changed: Primary User Name: %1 Primary Domain: %2 Primary Logon ID: %3 Client User Name: %4 Client ... Audit system events This security setting determines whether the OS audits any of the following events: Attempted system ... Audit: Audit the access of global system objects This security setting determines whether to audit the access of global system ... Audit: Audit the use of Backup and Restore privilege This security setting determines whether to audit the use of all user ... Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings. Windows ... Audit: Shut down system immediately if unable to log security audits This security setting determines whether the system ... Auditing settings on object changed: Object Server: %1 Object Type: %2 Object Name: %3 Handle ID: %4 Process ID: %5 Image ... Auditing settings on object were changed. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: %4 Object: ...