windows_audit_policy_option

Configures the current state of a Windows audit policy option.

⚙️ Compatible targets: Windows

Parameters

NameDocumentation
optionname Either 'CrashOnAuditFail', 'FullPrivilegeAuditing', 'AuditBaseObjects', 'AuditBaseDirectories'.

Choices:
  • CrashOnAuditFail
  • FullPrivilegeAuditing
  • AuditBaseObjects
  • AuditBaseDirectories

This parameter is required.
stateEither 'Enable' or 'Disable'.

Choices:
  • Enable
  • Disable

This parameter is required.

Outcome conditions

You need to replace ${option} with its actual canonified value.

  • ✅ Ok: windows_audit_policy_option_${option}_ok
    • ☑️ Already compliant: windows_audit_policy_option_${option}_kept
    • 🟨 Repaired: windows_audit_policy_option_${option}_repaired
  • ❌ Error: windows_audit_policy_option_${option}_error

Example

method: windows_audit_policy_option
params:
  option: CrashOnAuditFail
  state: Enable

Documentation

Configure a Windows audit policy option.

Example


- name: Make sure the audit policy option "AuditBaseObjects" is enabled
  method: windows_audit_policy_set
        option: "AuditBaseObjects"
        state: "Enable"