17.6.4 L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure' (Automated)
ObjectAccess_AuditRemovableStorage
This policy setting allows you to audit user attempts to access file system objects on a removable storage device. A security audit event is generated only for all objects for all types of access requested.
./Device/Vendor/MSFT/Policy/Config/Audit/ObjectAccess_AuditRemovableStorage
Format: int Value: 3
Audit event on success and failure.
YES
Auditing
Audit Removable Storage
Previous17.6.3 (L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure' (Automated)Next18. Administrative Templates (Computer)
Last updated