Lsass.exe audit mode

Pris en charge sur : Au minimum Windows Server 2012 R2, Windows 8.1 ou Windows RT 8.1

Registre

HKLM SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LSASS.exe

Nom de valeur : AuditLevel

Activé : AuditLevel = 8

Désactivé : AuditLevel = 0

Description

Enable auditing of Lsass.exe to evaluate feasibility of enabling LSA protection. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspx