Manage Active Directory Domain Services Auditing : Disable the Global Audit Policy

11/22/2010 5:49:32 PM

To disable the global audit policy by using the Windows interface, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Group Policy Management.
3.	In the console tree of the Group Policy Management console, expand the forest node, expand the domains node, expand the node for the domain in which you want to configure auditing, and then expand the Domain Controllers node.
4.	Right-click the Default Domain Controllers Policy, and click Edit. Tip By default, the Default Domain Controllers Policy GPO is linked to the Domain Controllers OU. If you have unlinked this GPO or linked additional GPOs, you need to select the applicable GPO.
5.	In the console tree of the Group Policy Management Editor, expand the Computer Configuration node, expand the Policies node, expand the Windows Settings node, expand the Security Settings node, expand the Local Policies node, and select the Audit Policy node.
6.	In the details pane, right-click Audit directory service access and click Properties.
7.	On the Audit directory service access Properties page, shown in Figure 1, deselect Define these policy settings. Figure 1. The Audit directory service access Properties page.
8.	Close the Group Policy Object Editor.

Tip

Changes to GPOs take effect the next time group policy is applied to a user and/or computer. To force the application of a GPO, type gpupdate /force on the command line.