Audit failures are typically generated when a logon request fails, although they can also be generated by changes to accounts, objects, policies, privileges, and other system events
An audit policy defines the types of events that are recorded in the Security logs
The Event ID that is triggered when a failed or successful event is registered differs (see the Audit Policiessection above)
You can navigate to Event Viewer> Windows Logs > Security
The pane in the center lists all the events that have been set up for auditing
Component of Microsoft's Windows NT operating system
Event Viewer is a component of Microsoft's Windows NT operating system that lets administrators and users view the event logs on a local or remote machine.Applications and operating-system components can use this centralized log service to report events that have taken place
Such as :A failure to start a component or to complete an action.In Windows Vista
Microsoft overhauled the event system.
