Why doesn all user right enabling actions show up in the log?
Even though auditing of enabled user rights is turned on in the Policy->Auditing dialog in User Manager (for Domains), there is a bunch of user rights that are not logged. One example, which can cause a lot of confusion, is the Backup and Restore user rights. The cause for these to be excluded is that it would generate too much log entries if enabled. A new log entry would be written for each backed up or restored file. Why is that? Couldn’t the backup program just take the backup right once and for all and then backup all of the files, then discard the right? See Securing Windows NT Installation (http://www.microsoft.com/ntserver/info/secure_NT_con.htm#a23) for a full list of privileges excluded from auditing and ways of turning auditing on for these. 2.11 Crypto 2.11.1 What is CryptoAPICryptoAPI is a set of encryption APIs that allow developers to develop applications that work securely over non-secure networks, such as the Internet. CryptoAPI is shipped with NT version 4 and the Int
