{"id":1202,"date":"2013-03-21T00:46:57","date_gmt":"2013-03-21T00:46:57","guid":{"rendered":"https:\/\/pipe2text.com\/?page_id=1202"},"modified":"2013-11-12T16:46:17","modified_gmt":"2013-11-12T16:46:17","slug":"enable-security-auditing-in-adfs-2-0","status":"publish","type":"page","link":"https:\/\/pipe2text.com\/?page_id=1202","title":{"rendered":"Enable Security Auditing in ADFS 2.0"},"content":{"rendered":"

Hi all,<\/p>\n

A very useful tool that can be used to get a better look at what is what is happening on your ADFS servers and for troubleshooting purposes is to enable security auditing for ADFS. This will log ADFS security events to the Security log in event viewer. There are easy steps that you need to take to get this working.<\/p>\n

Step 1\u00a0 –\u00a0Grant the ADFS service account the “Generate security audits” right on the ADFS server.\u00a0To do this, open the local security policy on the server\u00a0gpedit.msc\u00a0(can also be done thru GPO for multiple servers). Navigate to “Windows Settings\\Local Policies\\User Rights Assignment” and add the ADFS Service Account to have the “Generate security audits” right.<\/p>\n

Step 2 – Run the following command from the command prompt:<\/p>\n

auditpol.exe \/set \/subcategory:”Application Generated” \/failure:enable \/success:enable<\/p>\n

Step 3 – In the ADFS console, right click “ADFS 2.0” and choose “Edit Federation Service Properties” when the “Federation Service Properties” dialogue box appears choose the Events tab and select “Success Audits” and Failure Audits” as shown below.\"\"<\/a><\/p>\n

Now that you have complete the steps you will begin to see events in the Security log of the event viewer for ADFS as shown below.<\/p>\n

\"\"<\/a><\/p>\n

You are now finished enabling ADFS Security Auditing. I hope this helps!<\/p>\n","protected":false},"excerpt":{"rendered":"

Hi all, A very useful tool that can be used to get a better look at what is what is happening on your ADFS servers and for troubleshooting purposes is to enable security auditing for ADFS. This will log ADFS … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"class_list":["post-1202","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/pipe2text.com\/index.php?rest_route=\/wp\/v2\/pages\/1202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pipe2text.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/pipe2text.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/pipe2text.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/pipe2text.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1202"}],"version-history":[{"count":16,"href":"https:\/\/pipe2text.com\/index.php?rest_route=\/wp\/v2\/pages\/1202\/revisions"}],"predecessor-version":[{"id":1215,"href":"https:\/\/pipe2text.com\/index.php?rest_route=\/wp\/v2\/pages\/1202\/revisions\/1215"}],"wp:attachment":[{"href":"https:\/\/pipe2text.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}