Audit filtering platform connection

broken image

Note: This module can also remove unmanaged audit policies within this file. Then configure the policies you want to set. To start using advanced_audit_policy, include the defined type in your profile. C:\Windows\system32\GroupPolicy\Machine\Microsoft\Windows NT\Audit the file in which windows group policy stores these policies.This hash is used to map the advanced audit GUID policies back to the proper advanced audit subcategory name. This Ruby script can be used to generate the $guid_lookup_hash within the config.pp file found under manifest. The Ruby module: guid_lookup_hash_generation.rb puppetlabs-stdlib (version requirement: >= 4.6.0).

broken image

In addition all policies that are managed this way are stored in the audit.csv file so that the local group policy will not overwrite these settings every couple of hours.

broken image

This module uses auditpol.exe to configure the advanced auditing policies on Windows. This module sets and enforces the advanced auditing policies for windows.

broken image