I have two questions for this subject:
1. What is the difference between the SystemRoot location and the "windows" location?
2. If I need to set auditing for specific files within the \system32 directory, does it matter if I set it through SystemRoot or in the \system32 directory?