Windows – Can not set audit policy settings in windows 8.1, no matter what I do

I found this, it may be for XP but suggestion to use regshot on a Pro Windows 7 PC to capture the registry change may solve it for you

Take a look at this registry key which may disable it. I believe when set to zero as shown.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\limitblankpassworduse:
0x00000000

I use a free program called Regshot to do comparisons of the registry before and after such a change. There are other programs that may be a bit easier to use but for the price and the fact that it does not have to be installed make Regshot a neat utility to have.

http://www.snapfiles.com/get/regshot.html --- Regshot.

Source of Information

I checked my Windows 7 Pro gpedit, that group policy location does not exist, they must have changed it in Windows 7 for security reasons.

In Windows 7 / Vista:, run start > cmd.exe.

To list the options:

c:\auditpol /list /subcategory:*

Category/Subcategory

System

• Security State Change
• Security System Extension
• System Integrity
• IPsec Driver
• Other System Events

Logon/Logoff

• Logon
• Logoff
• Account Lockout
• IPsec Main Mode
• IPsec Quick Mode
• IPsec Extended Mode
• Special Logon
• Other Logon/Logoff Events
• Network Policy Server

Object Access

• File System
• Registry
• Kernel Object
• SAM
• Certification Services
• Application Generated
• Handle Manipulation
• File Share
• Filtering Platform Packet Drop
• Filtering Platform Connection
• Other Object Access Events
• Detailed File Share

Privilege Use

• Sensitive Privilege Use
• Non Sensitive Privilege Use
• Other Privilege Use Events

Detailed Tracking

• Process Creation
• Process Termination
• DPAPI Activity
• RPC Events

Policy Change

• Audit Policy Change
• Authentication Policy Change
• Authorization Policy Change
• MPSSVC Rule-Level Policy Change
• Filtering Platform Policy Change
• Other Policy Change Events

Account Management

• User Account Management
• Computer Account Management
• Security Group Management
• Distribution Group Management
• Application Group Management
• Other Account Management Events

DS Access

• Directory Service Access
• Directory Service Changes
• Directory Service Replication
• Detailed Directory Service Replication

Account Logon

• Credential Validation
• Kerberos Service Ticket Operations
• Other Account Logon Events
• Kerberos Authentication Service

Then use auditpol /set ... to set value. For more help, use auditpol /?.