Compartir a través de


Auditpol restore

 

Applies To: Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8

Restores system audit policy settings, per-user audit policy settings for all users, and all auditing options from a file that is syntactically consistent with the comma-separated value (CSV) file format used by the /backup option.

For examples of how this command can be used, see Examples.

Syntax

Auditpol /restore /file:<filename>

Parameters

Parameter

Description

/file

Specifies the file from which the audit policy should be restored. The file must have been created by using the /backup option or must be syntactically consistent with the CSV file format used by the /backup option.

/?

Displays help at the command prompt.

Remarks

For restore operations for the per-user policy and system policy, you must have Write or Full Control permission on that object set in the security descriptor. You can also perform the restore operation by possessing the Manage auditing and security log (SeSecurityPrivilege) user right. SeSecurityPrivilege is useful when restoring the security descriptor in the event of an inadvertent error or malicious attack.

Examples

To restore system audit policy settings, per-user audit policy settings for all users, and all auditing options from a file named Auditpolicy.csv that was created by using the /backup command, type:

Auditpol /restore /file:c:\auditpolicy.csv

Additional references

Command-Line Syntax Key

Auditpol backup