Windows Audit Report

the windows local user audit report is used to report the current security status of local windows accounts create the report configuration navigate to audit report > windows audit report open the report configuration tab create the report configuration by completing the fields the report job can be executed manually or periodically (as scheduled) we have the parameter exclude service accounts which we can enable on the device group if that parameter is enabled on the device group then it excludes all those users to fetch in the windows audit report when we execute the audit report, we enable this highlighted parameter to execute the report manually, click the options pop up menu button and select run to execute the reports periodically, the scheduled field needs to be configured in the report configuration the period can also be configured from the jobs scheduler by editing the windowsauditjob for the audit report, the selected device groups must have the globalusername and globalpassword properties defined see also section device group properties to be able to access the report detail, the user defined as globalusername should be a privileged user report details when a job finishes, the reports are listed in the reports tab to access the report navigate to audit report > windows audit report open the report tab click the options drop down menu button and select show details report details are shown in the windows audit report details section dashboard navigate to audit report > windows audit report open the dashboard tab choose the desired fields and click the display reports button