To see the new audit events in Event Viewer

[Aby]

To see the new audit events in Event Viewer



 

Code: [Select]

Open the Event Viewer. Click Start, type eventvwr in the Start Search box, and then press ENTER.


Code: [Select]

If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click continue

 

Code: [Select]

In the navigation pane, expand the Windows Logs branch.

   

Code: [Select]

Right-click Security, and then click Filter Current Log.

 

Code: [Select]

In the Includes/Excludes Event IDs box, type 4600-5500, and then click OK.

    Event Viewer displays any events that match the criteria. If you just enabled the audit events, there might be only a few events to view at first.