Configuring the global audit event logging location manually on Windows systems
To manually specify the target for audit trail information on a Windows computer, edit the following Windows registry key:
HKEY_LOCAL_MACHINE > SOFTWARE > Centrify > AuditTrail > AuditTrailTargets
The values are as follows:
- 0 (audit trail is disabled)
- 1 (the audit trail log goes to DirectAudit)
- 2 (the audit trail log goes to the Windows event log)
- 3 (the audit trail log goes to both DirectAudit and the Windows event log)
Note: If you’ve configured the global audit trail logging group policy, that policy’s registry setting is as follows, for your information:
HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Centrify > AuditTrail > AuditTrailTargets
If you’ve configured both a manual, local setting and a group policy for global audit trail logging, the group policy settings take precedence.