100%(4)4 out of 4 people found this document helpful
This preview shows page 1 - 6 out of 6 pages.
Asaiah Lowe2 Sept 2020Audit Common ThreatsGCU 121Setting up, as well as modifying an audit policy you need to go to the Group Policy Management in the server manager and click on the tools tab in the right-hand corner. Once you’ve done that, expand the forest tab > domains > win.rougeconstruction.net > and then right click on the Default Domain Policy. Select “Edit.” Once you got to the editor in the GPM, expand computer configuration > windows settings > security settings > local policies and click on the “Audit Policies.”
When you get to Audit Policy, you will select audit account logon events and right click for properties. Once you have got it to the page below, you will click “define these policy settings” and click both successand failure. Click “Apply” then “OK”2
The see about you logon attempts/ failures, you can go to event viewer. To get to event viewer, right click