2 Replies Latest reply on Oct 15, 2014 9:42 AM by himanshu sangwan

    Compliance:How to create Compliance rule for Audit Policy: Logon-Logoff: Logoff

    himanshu sangwan

      Hi All,

       

      I am facing issue while creating compliance rule for "Audit Policy: Logon-Logoff: Logoff"

       

      Computer Configuration\Windows Settings\Security Settings\Advanced Audit Policy Configuration\Audit Policies\Logon/Logoff\Audit Policy: Logon-Logoff: Logoff

      "Extended Object Entry:Logon_Logoff//findings/Logon\/Logoff/AccountLockout"."Value1 as String (All OS)"

      Below are the steps performed by me

       

      1) Create a Eo with below cmd

       

      nsh -c "//ServerName/blade_storage/extended_objects/disawin-audit.nsh" "??TARGET.NAME??" "Account Lockout"

       

      2) add in parts

      3) create a compliance rule

       

      "Extended Object Entry:Logon_Logoff//findings/Logon\/Logoff/AccountLockout"."Value1 as String (All OS)"

      or

       

      "Extended Object Entry:Logon_Logoff//findings/Logon\/Logoff/AccountLockout"."Value1 as String (All OS)"

       

      both above options are not working any suggestions

       

      Thanks

      himanshu