17.9.2 (L1) Ensure 'Audit Other System Events' is set to 'Success and Failure' (Automated)

System_AuditOtherSystemEvents

Description

This policy setting allows you to audit any of the following events: Startup and shutdown of the Windows Firewall service and driver. Security policy processing by the Windows Firewall Service. Cryptography key file and migration operations.

Audit Policy CSP - Windows Client ManagementMicrosoftLearn

OMA-URI

./Device/Vendor/MSFT/Policy/Config/Audit/System_AuditOtherSystemEvents

Recommended Setting

Format: int Value: 3

Audit event on success and failure.

Settings Catalog

YES

Auditing

Audit Other System Events