ADMX Viewer
AddSystemHard.Policies.AddMSFTHard• Machine

Lsass.exe audit mode

Download ADMX

Enable auditing of Lsass.exe to evaluate feasibility of enabling LSA protection. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspx

Policy Details

Policy Name
Pol_SecGuide_0203_LsassAudit
Registry Key
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LSASS.exe
Value Name
AuditLevel
Supported On
At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
Policy State Values
Enabled: 8
Disabled: 0
Available Languages
en-usfr-fr