Active Directory auditing best practices

Hi, today I’d like to share basic commands you can run on DCs to assess your major Active Directory auditing settings.

auditpol /get /category:*

gpresult /h auditds.html

You can additionally use rsop to assess which gpo is relevant for your active user, so to understand for example your lockout policy, password policy, etc.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.