The syslog-ng 3.0 Administrator Guide

Procedure 5.11.1.1. Turning on security logging on Windows XP

1. Login as an administrator.

2. Click Start, click Run, and type mmc /a.

3. On the File menu, click Add/Remove Snap-in, and click Add.

4. Under Snap-in, click Group Policy, and click Add.

5. In Select Group Policy Object, select Local Computer, then click Finish, click Close, and click OK.

6. In Console Root, select Local Computer Policy, then click Audit Policy.

7. Right-click the attribute or event you want to audit on the details pane.

8. Set the desired options in the Properties.

9. Repeat Steps 7-8 for every other event you want to audit.