Security Monitoring: User Account Management Audit Setting not Set on Member Servers

Security.Monitoring.UserAccountMgmtMS (UnitMonitor)

Monitors "Security Group Management" auditing setting

Element properties:

Target	Microsoft.Windows.Computer
Parent Monitor	System.Health.ConfigurationState
Category	AvailabilityHealth
Enabled	False
Alert Generate	False
Alert Auto Resolve	True
Monitor Type	Security.Monitoring.AuditPolMonitorType
Remotable	True
Accessibility	Internal
RunAs	Default

Source Code:

<UnitMonitor ID="Security.Monitoring.UserAccountMgmtMS" Accessibility="Internal" Enabled="false" Target="Windows!Microsoft.Windows.Computer" ParentMonitorID="Health!System.Health.ConfigurationState" Remotable="true" Priority="Normal" TypeID="Security.Monitoring.AuditPolMonitorType" ConfirmDelivery="false">

  <Category>AvailabilityHealth</Category>

  <OperationalStates>

    <OperationalState ID="ResultBad" MonitorTypeStateID="ResultBad" HealthState="Warning"/>

    <OperationalState ID="ResultGood" MonitorTypeStateID="ResultGood" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <IntervalSeconds>86400</IntervalSeconds>

    <SyncTime/>

    <SubCommandAuditSetting>User Account Management</SubCommandAuditSetting>

    <Result>Success and Failure</Result>

  </Configuration>

</UnitMonitor>