WinSecWiki > Security Settings > Advanced Audit Policies > Detailed Tracking > Process Creation
Audit Process Creation
This category is logged on all types of computers and allows you to track every program that starts on the local computer. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.
Coverage on events generated by this category are currently in the Security Log Encyclopedia:
Back to top