How to permanently disable Auditing in Windows 10?

Question

_{Friday, November 30, 2018 4:30 PM}

Hi, I want to permanently disable Auditing or logging in Windows 10, I ran the following commands in Command Prompt but after rebooting the system, I see the logs in Event Viewer!

Auditpol /remove /allusers
auditpol /clear
auditpol /clear /y
auditpol /ipaddress /disable
Auditpol /set /category:"Account Logon" /Success:disable /failure:disable
Auditpol /set /category:"Logon/Logoff" /Success:disable /failure:disable
Auditpol /set /category:"Account Management" /Success:disable /failure:disable
Auditpol /set /category:"DS Access" /Success:disable /failure:disable
Auditpol /set /category:"Object Access" /Success:disable /failure:disable
Auditpol /set /category:"policy change" /Success:disable /failure:disable
Auditpol /set /category:"Privilege use" /Success:disable /failure:disable
Auditpol /set /category:"System" /Success:disable /failure:disable

Please help me.

Thanks

All replies (20)

_{Friday, November 30, 2018 7:39 PM}

No one has any idea?

_{Saturday, December 1, 2018 12:41 AM}

Sure, I have an idea, don't do that. You lose track of critical events. Why do you want to disable auditing? 

_{Saturday, December 1, 2018 5:34 AM}

Just for test! I'll do that on my test virtual machine.

_{Monday, December 3, 2018 7:55 AM}

Hi,

Are domain-wide audit policies enabled? If yes, I am afraid it's impossible to disable local audit policies since domain-wide policy is prior to local-wide policy.

Please try run those commands again, and then run auditpol /get /category:*.

After that, restart your machine and run** auditpol /get /category:*** and gpresult to check if domain-wide audit policies are configured.

Best regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, December 3, 2018 8:10 AM}

Hi, no I'm in the WORKGROUP network.

_{Tuesday, December 4, 2018 10:08 AM}

Hi,

Are those audit policies configured in the local group policy editor?

Based on my knowledge, there will be no auditing if not configured as default.

Thus there will be no need to disable them.

Best regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, December 7, 2018 9:00 AM}

Hi,

Just want to confirm the current situations.

Please feel free to let us know if you need further assistance.

Best Regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, December 12, 2018 8:23 AM}

Hi,

Was your issue resolved?

If no, please reply and tell us the current situation in order to provide further help.

Best Regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, December 12, 2018 7:08 PM}

Hi, No, My problem has not been solving.

_{Thursday, December 13, 2018 9:42 AM}

Hi,

This is a quick note to let you know that I am currently performing research on this issue and will get back to you as soon as possible. I appreciate your patience.

If you have any updates during this process, please feel free to let me know.

Best regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, December 14, 2018 7:33 AM}

Hi,

What’s your current system version? I am not sure if we can run gpedit to open local group policy with Home version.

No matter what,we can search secpol.msc to open local security policy.

1. Please run auditpol /get /category:* to see the configuration of audit policy.
2. As for enabled one, navigate to local security policy->advanced audit policy configuration->system audit policies->policy change to find the corresponding policy, configure it with success and failure unchecked as captured.3. Run auditpol /get /category:* again to check if that one is disabled.

As I tested, all audit policies will be disabled with any one of them being configured as above. If not, please configure all the policies corresponding to enabled audit policies.

Best regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, December 14, 2018 11:14 AM}

I'm using Windows 7 Ultimate, I did what you tell me but I didn't get any result, Problem still persists.

_{Monday, December 17, 2018 3:17 AM}

Hi,

Would you please share me with the result of auditpol /get /category:* after implementing steps above**?**

Note: please hide the private information.

Best regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, December 21, 2018 9:54 AM}

Hi,

Just want to confirm the current situations.

Please feel free to let us know if you need further assistance.

Best Regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, December 24, 2018 2:22 AM}

Hi,

Was your issue resolved?

If no, please reply and tell us the current situation in order to provide further help.

Best Regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, December 24, 2018 8:30 PM}

I concluded that it is not possible to disable this damn. Thanks all

_{Tuesday, December 25, 2018 1:54 AM}

Hi,

I am glad to hear that your issue was successfully resolved.

If there is anything else we can do for you, please feel free to post in the forum.

Best Regards,

Lavilian

Please remember to mark the replies as answers if they help and unmark them if they provide no help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, June 14, 2019 4:25 AM}

auditpol /clear

Disables all auditing.

_{Friday, June 21, 2019 7:28 AM}

auditpol /clear

Disables all auditing.

It didn't.

_{Wednesday, June 3, 2020 11:41 AM}

This should work. 

auditpol /set /category:*  /success:disable /failure:disable
auditpol /get /category:* 

Seem to set all to `No Auditing`.