Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion Setting,Setting Value
DESKTOP,System,Credential Validation,{0CCE923F-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Credential Validation,{0CCE923F-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Computer Account Management,{0CCE9236-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Other Account Management Events,{0CCE923A-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Security Group Management,{0CCE9237-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,User Account Management,{0CCE9235-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,User Account Management,{0CCE9235-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Plug and Play Events,{0CCE9248-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Process Creation,{0CCE922B-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Directory Service Access,{0CCE923B-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Directory Service Access,{0CCE923B-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Directory Service Changes,{0CCE923C-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Directory Service Changes,{0CCE923C-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Account Lockout,{0CCE9217-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Account Lockout,{0CCE9217-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Group Membership,{0CCE9249-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Logoff,{0CCE9216-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Logon,{0CCE9215-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Logon,{0CCE9215-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Special Logon,{0CCE921B-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Removable Storage,{0CCE9245-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Removable Storage,{0CCE9245-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Audit Policy Change,{0CCE922F-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Audit Policy Change,{0CCE922F-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Authentication Policy Change,{0CCE9230-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Authorization Policy Change,{0CCE9231-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Sensitive Privilege Use,{0CCE9228-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Sensitive Privilege Use,{0CCE9228-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,IPsec Driver,{0CCE9213-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,IPsec Driver,{0CCE9213-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Other System Events,{0CCE9214-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Other System Events,{0CCE9214-69AE-11D9-BED3-505054503030},Failure,,2
DESKTOP,System,Security State Change,{0CCE9210-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,Security System Extension,{0CCE9211-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,System Integrity,{0CCE9212-69AE-11D9-BED3-505054503030},Success,,1
DESKTOP,System,System Integrity,{0CCE9212-69AE-11D9-BED3-505054503030},Failure,,2