TABLE OF CONTENTS

• Overview
• Steps to Enable Windows Event

Overview

Sometimes during the configuration of Window AD, the Local Security Policy is disabled. We can enable the Local Security Policy using Group Policy Management.

Steps to Enable Windows Event

1. Go to Local Security Policy/Group management policy.
2. Find Local Security Policy
3. Go to "Local Policies" under "Security Settings" and select "Audit Policy":

   

4. Click on any of the events, say "Account Audit Logon":

5. 

6. Check "Success" and "Failures", then click "Apply"
7. Repeat the same for all the events.
8. 
   For Group Policy Management, please refer to the link below:
   https://www.lepide.com/blog/audit-successful-logon-logoff-and-failed-logons-in-activedirectory/