利用 secedit.exe 配置本地审核策略

2019-01-30 02:08:26王振洲

exit /b

:help
cls
echo.System audit strategy manage tool. (C) Copyright 2013 enun-net.
echo.
echo.Usage: SAMTool -b^|r [drive:][path][filename] -o options -p parameters -v
echo.        
echo.         -b Backup the current configuration, Specifies an INF file.
echo.         -r From an INF file recovery configuration.
echo.         -o options^(Support multiple^):
echo.     D: Directory Service Access
echo.     E: Logon Events
echo.     S: System Events
echo.     O: Object Access
echo.     U: Privilege Use
echo.     C: Policy Change
echo.     L: Account Logon
echo.     M: Account Manage
echo.     P: Process Tracking
echo.     A: All audit
echo.         -p parameters:
echo.     0: Don't audit
echo.     1: Only audit successful
echo.     2: Only audit failure
echo.     3: All audit ^(successful and failure^)
echo.         -v Detailed results.
echo.
echo.Example: SAMTool -o EC -p 0 -v
echo.         SAMTool -b c:myconfig.inf -v
exit /b


例如:SAMTool -o EC -p 1 -v ,配置审核策略为:审核策略更改(成功),审核登录事件(成功),并显示较详细的输出。

原文:https://www.enun.net/?p=2339

相关文章 大家在看