The xAuditPolicy DSC resources allow you to configure and manage the advanced audit policy on all currently supported versions of Windows.
Please check out common DSC Resources contributing guidelines.
-
xAuditCategory configures the advanced audit policy Subcategories audit flags.
-
xAuditOption manages the auditpol options available in the auditpol.exe utility.
-
Subcategory: Name of the subcategory in the advanced audit policy.
-
AuditFlag: The name of the audit flag to apply to the subcategory. This is can be either Success or Failure.
-
Name: The name of the option to configure.
-
Vaule: The value to apply to the option. This can be either Enabled or Disabled.
-
Initial release with the following resources:
- xAuditPolicy
- xAuditOption
Configuration AuditPolicy
{
Import-DscResource -ModuleName xAuditPolicy
xAuditCategory LogonSuccess
{
Subcategory = 'Logon'
AuditFlag = 'Success'
Ensure = 'Present'
}
xAuditCategory LogonFailure
{
Subcategory = 'Logon'
AuditFlag = 'Failure'
Ensure = 'Present'
}
} Configuration AuditPolicy
{
Import-DscResource -ModuleName xAuditPolicy
xAuditCategory LogonSuccess
{
Subcategory = 'Logon'
AuditFlag = 'Success'
Ensure = 'Absent'
}
xAuditCategory LogonFailure
{
Subcategory = 'Logon'
AuditFlag = 'Failure'
Ensure = 'Present'
}
} Configuration AuditPolicy
{
Import-DscResource -ModuleName xAuditPolicy
xAuditOption AuditBaseDirectories
{
Name = 'AuditBaseDirectories'
Value = 'Enabled'
}
}