A New Vista Security Policy on Audit:Force Audit Policy Subcategor

SCENoApplyLegayAuditPolicy is the registry Value that stored the value of the
Security Policy Audit: Force Audit policy subcategory settings(Windows Vista
or later) to override audit policy category settings

There are 3 instances of this Registry value on a Vista machine. What do
each of these correspond to?
eg.Under
1. HKEY_LOCAL_MACHINE\System\CurrentControlSet001\Con trol\Lsa
2. HKEY_LOCAL_MACHINE\System\CurrentControlSet002\Con trol\Lsa
3. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Lsa

Which instance is the one that stores the value as set in
Group Policy object Editor for
Local Computer Policy:Security Settings\Local Policies\Security
Options\Audit: Force audit policy subcategory settings(Windows Vista or
later) to override audit policy category settings?

On Fri, 19 Oct 2007 06:11:01 -0700, Gayle wrote:

> SCENoApplyLegayAuditPolicy is the registry Value that stored the value of the
> Security Policy Audit: Force Audit policy subcategory settings(Windows Vista
> or later) to override audit policy category settings
>
> There are 3 instances of this Registry value on a Vista machine. What do
> each of these correspond to?
> eg.Under
> 1. HKEY_LOCAL_MACHINE\System\CurrentControlSet001\Con trol\Lsa
> 2. HKEY_LOCAL_MACHINE\System\CurrentControlSet002\Con trol\Lsa
> 3. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Contro l\Lsa
>
> Which instance is the one that stores the value as set in
> Group Policy object Editor for
> Local Computer Policy:Security Settings\Local Policies\Security
> Options\Audit: Force audit policy subcategory settings(Windows Vista or
> later) to override audit policy category settings?

http://support.microsoft.com/kb/100010

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
Any given program will expand to fill available memory.