I have a file server and try to set Audit Object Access to "Sucess, Failure". The setting is applied and I can then see when files are deleted any who deleted them. However, on a reboot this settings gets reset to "No Auditing".
I did a gpupdate /force to see if that was resetting the Local Security Policy and it isn't. In the event viewer I can see that the settings actually change when the server reboots.