Forum Discussion

Quadra's avatar
Quadra
Copper Contributor
Oct 30, 2025

Not able to update the parameter "UserRightsGenerateSecurityAudits" for OSConfigDesiredConfiguration

Hello,

I want to add my AD group as part of "UserRightsGenerateSecurityAudits" in order to be able to collect audit logs but when I run the command, the change is not applied (Processed 0 out of 1 settings) :

"Set-OSConfigDesiredConfiguration -Scenario SecurityBaseline/WS2025/MemberServer -Setting UserRightsGenerateSecurityAudits -Value @("*S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415","*S-1-5-20","*S-1-5-19","*S-1-5-21-2654652530-1219913000-911364509-1603")

Warning : Cannot process the settings 'UserRightsGenerateSecurityAudits': 0x82d0000a. Verify the value and try again.

Processed 0 out of 1 settings.

 

Using GPO, I'm able to update the value, but OsConfig is overwriting it after some time after because the group is not part of defaut values allowed by OsConfig.

Your assitance will be ready appreciated.

Thanks

No RepliesBe the first to reply

Resources