如前所述,“审核目录服务访问”和“审核对象访问审核策略”只允许在安全事件日志中针对那些特定类别生成审核,如果某个对象在其 SACL 中配置了审核 ACE,则只生成事件。当这些条目准备就绪后,安全事件将由 Windows 本地安全机构 (LSA) 生成并被写入安全事件日志。
Today, ahead of the Microsoft Build 2024 conference, we announced a new class of Windows computers, Copilot+ PC. Alongside this exciting new class of computers, we are introducing important security features and updates that make Windows 11 more secure for users and organizations, and give d...