Implement Windows Server auditing and diagnostics

  • Module
  • 7 Units
Intermediate
Administrator
Solution Architect
Support Engineer
Technology Manager
Windows Server

This module covers how to implement auditing and diagnostics in Windows Server for compliance and security. You learn how to configure the nine basic audit policy categories including account logon, object access, and privilege use, implement advanced auditing with granular policy settings for precise event tracking, use User Access Logging (UAL) to quantify unique client requests for installed server roles, and enable Setup and Boot Event Collection to monitor startup, driver loading, and system readiness events.

Learning objectives

After completing this module, you'll be able to:

  • Audit Windows Server events
  • Configure Windows Server to record diagnostic information

Prerequisites

  • Working knowledge of common Windows Server management tools
  • Some experience of typical Windows Server workloads
  • Basic knowledge of Windows PowerShell
Start