What is the difference between auditpol and local computer policy?
Current settings:
auditpol -> system audit policy -> logon/logoff:
- logon: success and failure
local computer policy -> computer configuration -> windows settings -> security settings -> local policies:
- audit policy folder: no auditing for all settings
windows logs -> security: It is currently showing 'Audit Failure' Event ID 4625 which is what I want for logon failures.
Does auditpol take precedence over local computer policy?
How do you edit the auditpol via 'Group Policy Object Editor'?
