What should you do?
A. Modify the security settings of the Default Domain Policy GPO.
B. Add a WMI filter to the Default Domain Policy GPO.
C. Configure a startup script that runs auditpol.exe on the domain controllers.
D. Configure a startup script that runs auditpol.exe on the member servers.
Answer:D
What should you do?
A. Modify the security settings of the Default Domain Policy GPO. B. Add a WMI filter to the Default Domain Policy GPO. C. Configure a startup script that runs auditpol.exe on the domain controllers. D. Configure a startup script that runs auditpol.exe on the member servers.
Explanation: Advanced audit policy settings cannot be applied using group policy to Windows Server 2008 servers. To circumvent that we have to use a logon script to apply the audit policy to the Windows Server 2008 member servers. Reference1: http://technet.microsoft.com/en-us/library/ff182311.aspx Advanced Security Auditing FAQ The advanced audit policy settings were introduced in Windows Vista and Windows Server 2008. The advanced settings can only be used on computers running Windows 7, Windows Vista, Windows Server 2008 R2, or Windows Server 2008. Note In Windows Vista and Windows Server 2008, advanced audit event settings were not integrated with Group Policy and could only be deployed by using logon scripts generated with the Auditpol.exe command-line tool. In Windows Server 2008 R2 and Windows 7, all auditing capabilities are integrated with Group Policy. This allows administrators to configure, deploy, and manage these settings in the Group Policy Management Console (GPMC) or Local Security Policy snap-in for a domain, site, or organizational unit (OU).