Display the audit policy
C:> Auditpol.exe \\computer
Running ...
(X) Audit Enabled
AuditCategorySystem = Success and Failure
AuditCategoryLogon = Failure
AuditCategoryObjectAccess = Failure
AuditCategoryPrivilegeUse = No
AuditCategoryDetailedTracking = No
AuditCategoryPolicyChange = No
AuditCategoryAccountManagement = Success and Failure
Enable audit for process category
C:> Auditpol.exe \\computer /process:all
Running ...
Audit information changed successfully on \\computer ...
New audit policy on \\computer ...
(X) Audit Enabled
AuditCategorySystem = Success and Failure
AuditCategoryLogon = Failure
AuditCategoryObjectAccess = Failure
AuditCategoryPrivilegeUse = No
AuditCategoryDetailedTracking = Success and Failure
AuditCategoryPolicyChange = No
AuditCategoryAccountManagement = Success and Failure
Enable/disable audit
C:> Auditpol.exe \\computer /disable
Running ...
Audit information changed successfully on \\computer...
New audit policy on \\computer...
(0) Audit Disabled
AuditCategorySystem = Success and Failure
AuditCategoryLogon = Failure
AuditCategoryObjectAccess = Failure
AuditCategoryPrivilegeUse = No
AuditCategoryDetailedTracking = Success and Failure
AuditCategoryPolicyChange = No
AuditCategoryAccountManagement = Success and Failure
C:> Auditpol.exe \\computer /enable
Running ...
Audit information changed successfully on \\computer ...
New audit policy on \\computer...
(X) Audit Enabled
AuditCategorySystem = Success and Failure
AuditCategoryLogon = Failure
AuditCategoryObjectAccess = Failure
AuditCategoryPrivilegeUse = No
AuditCategoryDetailedTracking = Success and Failure
AuditCategoryPolicyChange = No
AuditCategoryAccountManagement = Success and Failure