Computer configuration windows settings 2008

This will only open local group policy management. The OP appears to be asking about domain policy. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Stack Gives Back Safety in numbers: crowdsourcing data on nefarious IP addresses. Featured on Meta.

New post summary designs on greatest hits now, everywhere else eventually. Related 1. Configuring policy settings in this category can help you document attempts to authenticate account data on a domain controller or on a local Security Accounts Manager SAM.

Unlike Logon and Logoff policy settings and events, which track attempts to access a particular computer, settings and events in this category focus on the account database that is used. This category includes the following subcategories:. Audit Kerberos Authentication Service.

Audit Kerberos Service Ticket Operations. The security audit policy settings in this category can be used to monitor changes to user and computer accounts and groups. Audit Distribution Group Management.

Audit Other Account Management Events. Detailed Tracking security policy settings and audit events can be used to monitor the activities of individual applications and users on that computer, and to understand how a computer is being used. These audit events are logged only on domain controllers. Audit Detailed Directory Service Replication. Audit Directory Service Replication.

These events are particularly useful for tracking user activity and identifying potential attacks on network resources. Object Access policy settings and audit events allow you to track attempts to access specific objects or types of objects on a network or computer.

Some of the user interface elements that are described in this topic might differ from version to version. You must have Administrators rights on the local computer, or you must have the appropriate permissions to update a Group Policy Object GPO on the domain controller to perform these procedures. To open Local Security Policy, on the Start screen, type, secpol.

When you find the policy setting in the details pane, double-click the security policy that you want to modify. Some security policy settings require that the computer be restarted before the setting takes effect. Any change to the user rights assignment for an account becomes effective the next time the owner of the account logs on.

The following procedure describes how to configure a security policy setting for a Group Policy Object when you are on a workstation or server that is joined to a domain.