Configuring the global audit event logging location manually on Windows systems

To manually specify the target for audit trail information on a Windows computer, edit the following Windows registry key:

HKEY_LOCAL_MACHINE > SOFTWARE > Centrify > AuditTrail > AuditTrailTargets

The values are as follows:

• 0 (audit trail is disabled)
• 1 (the audit trail log goes to DirectAudit)
• 2 (the audit trail log goes to the Windows event log)
• 3 (the audit trail log goes to both DirectAudit and the Windows event log)

Note:   If you’ve configured the global audit trail logging group policy, that policy’s registry setting is as follows, for your information:

HKEY_LOCAL_MACHINE > SOFTWARE > Policies > Centrify > AuditTrail > AuditTrailTargets

If you’ve configured both a manual, local setting and a group policy for global audit trail logging, the group policy settings take precedence.