MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

16-40 Chapter 16 Configuring Security Settings and Internet Options
F16us12
Figure 16-12 Enable the Audit Account Logon Events policy.
7. Select the Success check box, the Failure check box, or both.
A check mark in the Success check box indicates that auditing is in effect for successful
attempts. A check mark in the Failure check box indicates that auditing is
in effect for failed attempts.
8. Click OK.
9. Restart your computer.
After you have set the audit policy, remember that the changes that you make to your
computer’s audit policy do not take effect immediately unless you restart your computer.
How to Enable Auditing for Files and Folders
If you have confidential files that you need to monitor, you can set up auditing for files
and folders on NTFS partitions. To audit user access to files and folders, you must first
set your audit policy to audit object access, which includes files and folders.
When you set your audit policy to audit object access, you enable auditing for files,
folders, and printers. However, you must also enable auditing on the specific resources
you want to audit.
To enable auditing for specific files and folders, use these steps:
1. Click Start, right-click My Computer, and then click Explore.
2. Right-click the file or folder for which you want to enable auditing and click Properties.