Enable Audit Policy for Your Computer

The following procedure explains how to configure auditing so that an event is logged when IPsec is involved in communication. Later, this will be useful to confirm that IPsec is working properly.

To enable the audit policy:

1. In the left-side navigation pane of the MMC Console window, double-click Local Computer Policy. 
2. Double-click Computer Configuration, double-click Windows Settings, double-click Security Settings, double-click Local Policies, and then double-click Audit Policy.
3. From the list of attributes displayed in the right-side pane, double-click Audit logon events.
   The Audit logon events Properties dialog box appears.
   
4. Under Audit these attempts, select both Success and Failure check boxes.
5. Click OK.
   
6. From the list of attributes displayed in the right-side pane, double-click Audit object access.
   The Audit object access Properties dialog box appears.
   
7. Under Audit these attempts, select both Success and Failure check boxes.
8. Click OK.
9. Keep your MMC Console open and proceed to the next topic.