Configure Privilege Elevation Logging to the Windows Event Log Setting

You can configure Dynamic Environment Manager to log the details of elevated application launches and, if desired, de-elevated child processes.

The default behavior of this setting is to log the details of the following events to the Windows event log.

• An application privilege is elevated.
• An elevated application launches a de-elevated child process.

Procedure

1. In the Group Policy Management Editor, double-click Privilege elevation logging to the Windows event log.

2. Select Enabled.

3. If you do not want Dynamic Environment Manager to log de-elevated child processes, deselect Log de-elevated application launches.

4. Click OK.