Audit directory service access This security setting determines whether the OS audits user attempts to access Active Directory ...

Audit directory service access

This security setting determines whether the OS audits user attempts to access Active Directory objects. Audit is only generated for objects that have system access control lists (SACL) specified, and only if the type of access requested (such as Write, Read, or Modify) and the account making the request match the settings in the SACL.  

The administrator can specify whether to audit only successes, only failures, both successes and failures, or to not audit these events at all (i.e. neither successes nor failures).  

If Success auditing is enabled, an audit entry is generated each time any  account successfully accesses a Directory object that has a matching SACL specified.  

If Failure auditing is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a Directory object that has a matching SACL specified.

Default values on Client editions:

  Directory Service Access: No Auditing
  Directory Service Changes: No Auditing
  Directory Service Replication: No Auditing
  Detailed Directory Service Replication: No Auditing

Default values on Server editions:

  Directory Service Access: Success
  Directory Service Changes: No Auditing Directory
  Service Replication: No Auditing
  Detailed Directory Service Replication: No Auditing

Important: For more control over auditing policies, use the settings in the Advanced Audit Policy Configuration node. For more information about Advanced Audit Policy Configuration, see http://go.microsoft.com/fwlink/?LinkId=140969.

Audio and video playback redirection cannot occur on the client computer because the Remote Desktop Connection version is ... Audio playback redirection quality mode: %2 Quality mode is a bitmask where Dynamic=0x01, Medium=0x02, and High Quality = ... Audit account logon events This security setting determines whether the OS audits each time this computer validates an account's ... Audit account management This security setting determines whether to audit each event of account management on a computer. ... Audit directory service access This security setting determines whether the OS audits user attempts to access Active Directory ... Audit file system global object access This policy setting allows you to apply a comprehensive object access audit policy ... Audit logon events This security setting determines whether the OS audits each instance of a user attempting to log on to ... Audit object access This security setting determines whether the OS audits user attempts to access non-Active Directory objects. ... Audit policy change This security setting determines whether the OS audits each instance of attempts to change user rights ...