I want to change logon event and directory service acces event auditing. On my GPO Editor: Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy these items are set for Sucess. Yet when I go into edit them the check boxes are grayed out so they can't be changed. Where is this being controlled from?
Is there a script, program (already installed on 2003) that I can run that will show me these settings - effective GPOs - what's on or off, enabled or disabled?