UID

title

description

helpviewer_keywords

old-location

tech.root

ms.assetid

ms.date

ms.keywords

req.header

req.include-header

req.target-type

req.target-min-winverclnt

req.target-min-winversvr

req.kmdf-ver

req.umdf-ver

req.ddi-compliance

req.unicode-ansi

req.idl

req.max-support

req.namespace

req.assembly

req.type-library

req.lib

req.dll

req.irql

targetos

req.typenames

req.redist

ms.custom

f1_keywords

dev_langs

topic_type

api_type

api_location

api_name

NS:ntsecapi._AUDIT_POLICY_INFORMATION

AUDIT_POLICY_INFORMATION (ntsecapi.h)

Specifies a security event type and when to audit that type.

*PAUDIT_POLICY_INFORMATION

AUDIT_POLICY_INFORMATION

AUDIT_POLICY_INFORMATION structure [Security]

PAUDIT_POLICY_INFORMATION

PAUDIT_POLICY_INFORMATION structure pointer [Security]

PER_USER_AUDIT_FAILURE_EXCLUDE

PER_USER_AUDIT_FAILURE_INCLUDE

PER_USER_AUDIT_NONE

PER_USER_AUDIT_SUCCESS_EXCLUDE

PER_USER_AUDIT_SUCCESS_INCLUDE

PER_USER_POLICY_UNCHANGED

POLICY_AUDIT_EVENT_FAILURE

POLICY_AUDIT_EVENT_NONE

POLICY_AUDIT_EVENT_SUCCESS

POLICY_AUDIT_EVENT_UNCHANGED

ntsecapi/AUDIT_POLICY_INFORMATION

ntsecapi/PAUDIT_POLICY_INFORMATION

security.audit_policy_information

security\audit_policy_information.htm

security

3fafeec9-a028-4a65-933e-fb973eb257b0

12/05/2018

*PAUDIT_POLICY_INFORMATION, AUDIT_POLICY_INFORMATION, AUDIT_POLICY_INFORMATION structure [Security], PAUDIT_POLICY_INFORMATION, PAUDIT_POLICY_INFORMATION structure pointer [Security], PER_USER_AUDIT_FAILURE_EXCLUDE, PER_USER_AUDIT_FAILURE_INCLUDE, PER_USER_AUDIT_NONE, PER_USER_AUDIT_SUCCESS_EXCLUDE, PER_USER_AUDIT_SUCCESS_INCLUDE, PER_USER_POLICY_UNCHANGED, POLICY_AUDIT_EVENT_FAILURE, POLICY_AUDIT_EVENT_NONE, POLICY_AUDIT_EVENT_SUCCESS, POLICY_AUDIT_EVENT_UNCHANGED, ntsecapi/AUDIT_POLICY_INFORMATION, ntsecapi/PAUDIT_POLICY_INFORMATION, security.audit_policy_information

ntsecapi.h

Windows

Windows Vista [desktop apps only]

Windows Server 2008 [desktop apps only]

Windows

AUDIT_POLICY_INFORMATION, *PAUDIT_POLICY_INFORMATION

19H1

_AUDIT_POLICY_INFORMATION

ntsecapi/_AUDIT_POLICY_INFORMATION

PAUDIT_POLICY_INFORMATION

ntsecapi/PAUDIT_POLICY_INFORMATION

AUDIT_POLICY_INFORMATION

ntsecapi/AUDIT_POLICY_INFORMATION

c++

APIRef

kbSyntax

HeaderDef

Ntsecapi.h

AUDIT_POLICY_INFORMATION

AUDIT_POLICY_INFORMATION structure

-description

The AUDIT_POLICY_INFORMATION structure specifies a security event type and when to audit that type.

-struct-fields

-field AuditSubCategoryGuid

A GUID structure that specifies an audit subcategory.

-field AuditingInformation

A set of bit flags that specify the conditions under which the security event type specified by the AuditSubCategoryGuid and AuditCategoryGuid members are audited. The following values are defined.

Important Note that the meaning of these values differs depending on which function is using this structure.

Value	Meaning
POLICY_AUDIT_EVENT_UNCHANGED 0x00000000	Do not change auditing options for the specified event type. This value is valid for the AuditSetSystemPolicy and AuditQuerySystemPolicy functions.
POLICY_AUDIT_EVENT_SUCCESS 0x00000001	Audit successful occurrences of the specified event type. This value is valid for the AuditSetSystemPolicy and AuditQuerySystemPolicy functions.
POLICY_AUDIT_EVENT_FAILURE 0x00000002	Audit failed attempts to cause the specified event type. This value is valid for the AuditSetSystemPolicy and AuditQuerySystemPolicy functions.
POLICY_AUDIT_EVENT_NONE 0x00000004	Do not audit the specified event type. This value is valid for the AuditSetSystemPolicy and AuditQuerySystemPolicy functions.
PER_USER_POLICY_UNCHANGED 0x00	Do not change auditing options for the specified event type. This value is valid for the AuditSetPerUserPolicy and AuditQueryPerUserPolicy functions.
PER_USER_AUDIT_SUCCESS_INCLUDE 0x01	Audit successful occurrences of the specified event type. This value is valid for the AuditSetPerUserPolicy and AuditQueryPerUserPolicy functions.
PER_USER_AUDIT_SUCCESS_EXCLUDE 0x02	Do not audit successful occurrences of the specified event type. This value is valid for the AuditSetPerUserPolicy and AuditQueryPerUserPolicy functions.
PER_USER_AUDIT_FAILURE_INCLUDE 0x04	Audit failed attempts to cause the specified event type. This value is valid for the AuditSetPerUserPolicy and AuditQueryPerUserPolicy functions.
PER_USER_AUDIT_FAILURE_EXCLUDE 0x08	Do not audit failed attempts to cause the specified event type. This value is valid for the AuditSetPerUserPolicy and AuditQueryPerUserPolicy functions.
PER_USER_AUDIT_NONE 0x10	Do not audit the specified event type. This value is valid for the AuditSetPerUserPolicy and AuditQueryPerUserPolicy functions.