18 lines
942 B
Python
18 lines
942 B
Python
|
import win32security,win32file,win32api,ntsecuritycon,win32con
|
||
|
|
policy_handle = win32security.GetPolicyHandle('rupole',win32security.POLICY_ALL_ACCESS)
|
||
|
|
|
||
|
|
event_audit_info=win32security.LsaQueryInformationPolicy(policy_handle,win32security.PolicyAuditEventsInformation)
|
||
|
|
print(event_audit_info)
|
||
|
|
|
||
|
|
new_audit_info=list(event_audit_info[1])
|
||
|
|
new_audit_info[win32security.AuditCategoryPolicyChange]= \
|
||
|
|
win32security.POLICY_AUDIT_EVENT_SUCCESS|win32security.POLICY_AUDIT_EVENT_FAILURE
|
||
|
|
new_audit_info[win32security.AuditCategoryAccountLogon]= \
|
||
|
|
win32security.POLICY_AUDIT_EVENT_SUCCESS|win32security.POLICY_AUDIT_EVENT_FAILURE
|
||
|
|
new_audit_info[win32security.AuditCategoryLogon]= \
|
||
|
|
win32security.POLICY_AUDIT_EVENT_SUCCESS|win32security.POLICY_AUDIT_EVENT_FAILURE
|
||
|
|
|
||
|
|
win32security.LsaSetInformationPolicy(policy_handle, win32security.PolicyAuditEventsInformation, (1,new_audit_info))
|
||
|
|
|
||
|
|
win32security.LsaClose(policy_handle)
|