Endpoint configuration · GraphQL enum

AuditPolicySetting enum

Controls which outcomes of a Windows audit subcategory are recorded in the Security event log.

Values

Enum Value Description

SUCCESS

 Record only events that completed successfully.

FAILURE

 Record only events that failed.

NO_AUDITING

 Do not record events for this subcategory.

SUCCESS_AND_FAILURE

 Record both successful and failed events.

Used by

  • AuditAccountLogon type: Account Logon audit subcategories for credential validation events.
  • AuditAccountManagement type: Account Management audit subcategories for user and group account operations.
  • AuditDetailedTracking type: Detailed Tracking audit subcategories for process and application monitoring.
  • AuditDSAccess type: Directory Service Access audit subcategories for Active Directory operations.
  • AuditLogonLogoff type: Logon/Logoff audit subcategories for authentication and session events.
  • AuditObjectAccess type: Object Access audit subcategories for file, registry, and resource access.
  • AuditPolicyChange type: Policy Change audit subcategories for monitoring security policy modifications.
  • AuditPrivilegeUse type: Privilege Use audit subcategories for monitoring use of user rights.
  • AuditSystem type: System audit subcategories for system-level security events.

Example

Example

"SUCCESS"