Windows Logon audit is not enabled RDS knight

[fakebrains]

RDS knight
Bruteforce tab.
Server 2012 / Server 2016
Windows Logon audit is not enabled - Logon Failures are not monitored. Click here to repair the feature.
I have to keep on clicking it to repair it. I would like to set this through group policy.

I am enabling the setting here and running gpupdate /force.

Computer Configuration go to Policies node and expand it as
Policies -> Windows Settings -> Security Settings -> Local Policies -> Audit Policy
In the right hand panel of GPME, either Double click on “Audit logon events” or Right Click -> Properties on “Audit logon events”
A new window of “Audit logon events” properties will open. Check “Success” and “Failure” boxes and click “Ok”

I am looking for exact GPO settings to keep this always enabled and logging.

[admin]

Hello,


If your server is the member of a domain, this strategy may need to be set directly on the domain controller.

You can also activate this strategy which needs to be disabled and is located in: Computer configuration / Policies / Administrative Template / System / Group Policy / Turn off Local Group Policy objects processing.

[fakebrains]

Thanks.
I disabled the group policy that was affecting it.