Link to home
Start Free TrialLog in
Avatar of Jerry Seinfield
Jerry SeinfieldFlag for United States of America

asked on

Advance auditing enabling in domain controllers, servers and workstations

Hi Experts,

We are being audited by external partners, and they recommended to enable Advanced security audit policy, and enable all features as per screenshot below. The problem with this change is they want to apply to all DCs, workstations and servers of the organization.

I need your help to identify and prevent any major impact or performance degradation, as this change will be applied to all DCs, servers and workstations.

Can you please provide me with some sort of documentation about business case, blogs, service impact after enabling advance auditing?

What is the service impact for a large organization once this policies are enabled?

Any performance issues or log file impact on servers/dcs/workstation after enabling this per link below?
https://technet.microsoft.com/en-us/library/dn319056%28v=ws.11%29.aspx?f=255&MSPPError=-2147217396

Any known issues after applied advance auditing per link above?

Please, provide your input and elaborate the answers, it would be highly appreciated that you do not only attach links, more than links look for your feedback.

Provide instructions steps by step in case of the elaboration of a plan to prevent service/server degradation

Single forest/Single domain/multiple sites, all DCs are Windows 2012 R2 latest patches, no other software running on DCs.

Windows 2008 is the forest and domain level

All workstations run Windows 7 and 10.

Servers is a mix of 2003/2008/2008R2/2012/2012 R2
AuditDCs.png
auditservers.png
AuditWorkstations.png
ASKER CERTIFIED SOLUTION
Avatar of Ajit Singh
Ajit Singh
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial