| Administrative Templates |
| Audit Process Creation |
| Include command line in process creation events | Enabled |
| Application |
| Control Event Log behavior when the log file reaches its maximum size | Disabled |
| Specify the maximum log file size (KB) | Enabled |
| Maximum Log Size (KB) | 32768 |
| Security |
| Control Event Log behavior when the log file reaches its maximum size | Disabled |
| Specify the maximum log file size (KB) | Enabled |
| Maximum Log Size (KB) | 196608 |
| Setup |
| Control Event Log behavior when the log file reaches its maximum size | Disabled |
| Specify the maximum log file size (KB) | Enabled |
| Maximum Log Size (KB) (Device) | 32768 |
| System |
| Control Event Log behavior when the log file reaches its maximum size | Disabled |
| Specify the maximum log file size (KB) | Enabled |
| Maximum Log Size (KB) | 32768 |
| Auditing |
| Account Logon Audit Credential Validation | Success+ Failure |
| Account Logon Logoff Audit Account Lockout | Failure |
| Account Logon Logoff Audit Group Membership | Success |
| Account Logon Logoff Audit Logoff | Success |
| Account Logon Logoff Audit Logon | Success+ Failure |
| Account Management Audit Application Group Management | Success+ Failure |
| Audit Authentication Policy Change | Success |
| Audit Authorization Policy Change | Success |
| Audit Changes to Audit Policy | Success |
| Audit File Share Access | Success+Failure |
| Audit Other Logon Logoff Events | Success+Failure |
| Audit Security Group Management | Success |
| Audit Security System Extension | Success |
| Audit Special Logon | Success |
| Audit User Account Management | Success+Failure |
| Detailed Tracking Audit PNP Activity | Success |
| Detailed Tracking Audit Process Creation | Success |
| Object Access Audit Detailed File Share | Failure |
| Object Access Audit Other Object Access Events | Success+ Failure |
| Object Access Audit Removable Storage | Success+ Failure |
| Policy Change Audit MPSSVC Rule Level Policy Change | Success+ Failure |
| Policy Change Audit Other Policy Change Events | Failure |
| Privilege Use Audit Sensitive Privilege Use | Success+ Failure |
| System Audit I Psec Driver | Success+ Failure |
| System Audit Other System Events | Success+ Failure |
| System Audit Security State Change | Success |
| System Audit System Integrity | Success+ Failure |