Windows 10: Endpoint Configuration Audit Policy Issue

Hello,I am having an odd issue with viewing a machine's local audit policy after it has received policy from endpoint.microsoft.com.This will work better by providing an example.... I have the following policy settings which are being deployed with a "Success" status in Endpoint:OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Audit/AccountLogonLogoff_AuditLogonValue: 3 IntegerOMA-URI: ./Device/Vendor/MSFT/Policy/Config/Audit/AccountManagement_AuditUserAccountManagementValue: 3 IntegerThese are deployed successfully to the endpoint according to the configuration profile status. However, when I

:)

 

Cannot open advanced audit policy configuration

Hi Microsoft Team,

I am facing issue with advanced audit policy configuration please find below screenshot

 

SIEM Integration With Microsoft Endpoint Configuration Manager

Hi,



Thank you for writing to Microsoft Community Forums.



We understand the concern as you want to know whether
it’s possible to forward antivirus logs in Microsoft Endpoint Configuration Manager to a SIEM.



In this case we would suggest you to refer these articles:

Configure
Endpoint Protection

Microsoft Endpoint Configuration Manager documentation



However, for concern/queries related to Microsoft Endpoint Configuration, let me help to point you in the right direction. I would suggest you to post your query in
TechNet Forums where you will find professionals
with expertise on Microsoft Endpoint Configuration
and that would be the appropriate forum



Regards,



Aditya Roy

Microsoft Community – Moderator

 

Advance Audit Policies are not being applied via GPO

Advanced Audit Policy Configuration inclusive of System Audit Policies like Account Logon, Account Management, DS Access, Logon/Logoff, etc are not being applied on the servers when GPO is implemented for the same.

We have additional settings applied via same GPO which is successfully applied.