Step 8: Configure Local Security Auditing Policies

Windows XP Professional has the ability to record more security events, but the settings are not enabled by default. Follow these steps to enable additional security event logging:

1. Click Start > Control Panel.
2. Double-click Administrative Tools and then Local Security Policy.
3. In the left pane, select Local Policies > Audit Policy .
4. Double-click Audit account logon events in the right pane.
5. Under Audit these attempts select (check) Success and Failure.
6. Click OK to save the settings.
7. Repeat Steps 4 through 6 for each Audit policy listed in the right pane. Then, close the window.
   
   Note: These steps can not be performed on Windows XP Home Edition.

Once you complete the basic security steps, review the Additional Security Tips and Advanced Steps pages.

Additional Security Tips