date: “2016-12-12” draft: false title: “auditpol”
- TechNet Manual
- Available in: Vista+
Alternatives
- SysInt: none known
- WMIC: audit_policy_functions
- PS: none known
Usage
Displays information about and performs functions to manipulate audit policies. The audit policy command-line tool can be used to:
- Set and query a system audit policy.
- Set and query a per-user audit policy.
- Set and query auditing options.
- Set and query the security descriptor used to delegate access to an audit policy.
- Report or back up an audit policy to a comma-separated value (CSV) text file.
- Load an audit policy from a CSV text file.
- Configure global resource SACLs.
Examples
| command | description |
|---|---|
auditpol /get |
Displays the current audit policy. |
Man
Syntax Auditpol command [<sub-command><options>]
Parameters
/get - Displays the current audit policy.
/set - Sets the audit policy.
/list - Displays selectable policy elements.
/backup - Saves the audit policy to a file.
/restore - Restores the audit policy from a file that was previously created by using auditpol
/backup - See Auditpol restore for syntax and options
/clear - Clears the audit policy
/remove