Hi,
Can anyone suggest any VBS or BAT file to Enable Audit of Failure Event for Multiple computer? I have to enable Audit of Failure Events on %SystemDrive%.
As of now, I can do it for single machine by below steps.
I have below *.inf file which I save in any location and then run SECEDIT command to enable Audit.
Step 1: Save below *.INF file in C:\Temp\myprog.inf
-----------------------------------------------
[Unicode]
Unicode=yes
[Registry Values]
[File Security]
"%SystemRoot%\System32\winload.exe","0,S:AR(AU;OICIFA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
"%SystemDrive%\",0,"S:AR(AU;OICIFA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
[Version]
signature="$CHICAGO$"
Revision=1
---------------------------------------------
==========================================================================
Step 2: Run SECEDIT Command in CMD:
-------------------------------------------
SECEDIT /configure /db c:\TEMP\database.sdb /cfg c:\TEMP\myprog.inf /overwrite /areas FILESTORE /log c:\IsecDeploy.log /quiet
--------------------------------------------
Pranay (MCSE, MCITP)