RSOP_AuditPolicy class

The RSOP_AuditPolicy WMI class represents the security setting for a local Group Policy that relates to the auditing of an event type. Events can include, among others, system events and account management events.

Note  Classes that derive from the RSOP_PolicySetting class must redefine the precedence property to be a key.

The following syntax is simplified from MOF code.

Syntax

class RSOP_AuditPolicy : RSOP_SecuritySettings
{
  string  Category;
  boolean Failure;
  uint32  precedence;
  boolean Success;
};

Members

The RSOP_AuditPolicy class has these types of members:

• Properties

Properties

The RSOP_AuditPolicy class has these properties.

Category

Data type: string

Access type: Read-only

Qualifiers: Key

Describes the type of audit event. This property can have one of the following values:

• "AuditSystemEvents"
• "AuditLogonEvents"
• "AuditObjectAccess"
• "AuditPrivilegeUse"
• "AuditPolicyChange"
• "AuditAccountManage"
• "AuditProcessTracking"
• "AuditDSAccess"
• "AuditAccountLogon"

For more information about the preceding values, see the Microsoft Windows 2000 Server Resource Kit Group Policy Reference.

Failure

Data type: boolean

Access type: Read-only

Qualifiers: NotNull

If this property is TRUE it indicates that this instance of the security policy setting is a failure audit event.

precedence

Data type: uint32

Access type: Read-only

Qualifiers: Key

Inherited from RSOP_PolicySetting.

Success

Data type: boolean

Access type: Read-only

Qualifiers: NotNull

If this property is TRUE it indicates that this instance of the security policy setting is a success audit event.

Remarks

The RSOP_AuditPolicy class is derived from RSOP_SecuritySettings which is derived from RSOP_PolicySetting.

For more information about failure and success audit events, see Event Types.

Requirements

See also

RSOP_SecuritySettings

RSOP_PolicySetting