Logon Success and Failure Auditing Enabled

Summary

This document outlines how to run auditpol.exe to determine if logon success and failure auditing is enabled.

Settings

Detection String	Comparator	Result	Applicable OS
auditpol.exe /get /subcategory:logon	Contains	Success and Failure	Windows AD Controller