winload.exe audit settings

Copper Contributor

Applied a GPO that sets audit settings for c:\windows\system32\winload.exe The GPO appears to be applied, all other setting in GPO get applied excepet the setting of fail for everyone all access to winload.exe. RSOP show the specific setting, but when you view it, security and audit setting come back blank. The audit settings on the file remain unchanged from all, special, write. 

 

Anyone know what would be preventing this gpo setting from working on this file. I can change it manually but it will revert back. It must be protected in some way to prevent changes due to the critical nature of the file?

0 Replies