How To Enable Security Auditing in Windows XP Pro

Logging events can help you monitor your computer or network and prevent a successful attack and can also prove very useful in determining how and when an attack occurred if you use the logs as forensic evidence.

  1. Click on Start
  2. Click on All Programs
  3. Click on Administrative Tools (if its there skip to Step 7. To turn it on continue with Step 4)
  4. Right-click on the Start bar and select Properties.
  5. Select the Start Menu tab and click on the Customize button
  6. Select the Advanced tab and scroll to the bottom of the options for System Administrative Tools and select the option you want
  7. Select Local Security Policy
  8. Click on the + next to Local Policies to expand the tree
  9. Select Audit Policy
  10. For each option in the right panel you can double-click on it to select Success or Failure logging
  1. To disable logging for an option just uncheck both the Success and Failure boxes
  2. Remember that logging can affect performance. Do some research to determine the right balance between logging and performance for your system

Thank you

Leave a Reply