Windows Vista - http://www.vistaarticles.com
Security Settings are not Applied
http://www.vistaarticles.com/articles/214/1/Security-Settings-are-not-Applied
By 
Published on 12/10/2006
 
Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings.

Security Settings are not Applied

Method 1: Disable the policy setting by using Group Policy Object Editor

Verify that the policy setting was enabled by using Group Policy, and then disable the policy setting by using Group Policy Object Editor. To do this, follow these steps:

1. Verify that the "Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings" policy setting was enabled by using Group Policy. To do this, follow these steps:a.  On the Windows Vista client computer, click Start, point to All Programs, click Accessories, click Run, type rsop.msc in the Open box, and then click OK.
b.  Expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options. 
c.  Double-click Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings.
d.  Verify that the policy setting is set to Enabled, and then note the Group Policy object (GPO).
 
2. Disable the "Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings" policy setting in the GPO. To do this, follow these steps:
a.  In Group Policy Object Editor, open the GPO.
b.  Expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then click Security Options. 
c.  Double-click Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings.
d.  Click Disabled, and then click OK.
 
3. Restart the Windows Vista client computer or computers.

Method 2: Disable the policy setting by using Registry Editor

To manually disable the policy setting by using Registry Editor, follow these steps:

1. Log on to the Windows Vista client computer as a user who is a member of the Administrators group. 
2. Click Start, point to All Programs, click Accessories, click Run, type regedit in the Open box, and then click OK. If the User Account Control dialog box is displayed on the screen and prompts you to elevate your administrator token, click Continue.
3. Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA
4. Right-click SCENoApplyLegacyAuditPolicy, and then click Modify.
5. Type 0 in the Value data box, and then click OK.
6. Exit Registry Editor.
7. Restart the Windows Vista client computer.