1

I need to know how to log users and admins activity on Windows, like auditd does on Linux. After searching, the only thing I found was this Audit account log-on events policy option for Windows 7.

Is there some standard used for Windows servers and workstations?

Improve this question

1 Answer 1

Reset to default
1

The logging options available in Windows run pretty deep, so choose what you want and set your policies appropriately.

To give you a flavour of what options there are (and are recommended) have a look at the Audit Policy Recommendations.

Improve this answer
1
  • 1
    So no specific tool, everything is available inside Windows itself and it is just a matter of configuration?
    – lalebarde
    Commented Oct 4, 2018 at 12:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .