Share via

2.2.4.20 POLICY_AUDIT_EVENT_TYPE

  • Article
 typedef  enum _POLICY_AUDIT_EVENT_TYPE
 {
   AuditCategorySystem = 0,
   AuditCategoryLogon,
   AuditCategoryObjectAccess,
   AuditCategoryPrivilegeUse,
   AuditCategoryDetailedTracking,
   AuditCategoryPolicyChange,
   AuditCategoryAccountManagement,
   AuditCategoryDirectoryServiceAccess,
   AuditCategoryAccountLogon
 } POLICY_AUDIT_EVENT_TYPE,
  *PPOLICY_AUDIT_EVENT_TYPE;

AuditCategorySystem:  Manages auditing of system-related events

AuditCategoryLogon:  Manages auditing of account logon events

AuditCategoryObjectAccess:  Manages auditing of object access events

AuditCategoryPrivilegeUse:  Manages auditing of privilege use events

AuditCategoryDetailedTracking:  Manages detailed auditing

AuditCategoryPolicyChange:  Manages auditing of policy change events

AuditCategoryAccountManagement:  Manages auditing of account management events

AuditCategoryDirectoryServiceAccess:  Manages auditing of Active Directory access events

AuditCategoryAccountLogon:  Manages auditing of account logon events

The values in this enumeration are used as indices into the EventAuditingOptions field of the LSAPR_POLICY_AUDIT_EVENTS_INFO structure (see section 2.2.4.4).