Skip to main content

Create (Category: Scheduled task)

Make sure the following requirements are met:

  • Licenses:

    • a product license that includes EDR or XDR

    • a GravityZone EDR Data Retention Add-on

      Note

      You have the following three options available for data retention add-ons: GravityZone EDR 90 days Data Retention Add-on, GravityZone EDR 180 days Data Retention Add-on, or GravityZone EDR 365 days Data Retention Add-on.

  • Local security policy: Security Settings > Advanced Audit Policy Configuration > System Audit Policies - Local Group Policy Object > Object Access > Audit Other Object Access Events. For more information on how to enable this policy, refer to the section below.

Configure local security policy

Follow these steps to configure the local security policy:

  1. Go to Start > Local Security Policy.

  2. Navigate the tree to Security Settings > Advanced Audit Policy Configuration > System Audit Policies - Local Group Policy Object > Object Access.

    Security policy tree
  3. Open the Audit Other Object Access Events policy.

  4. Configure it as shown below:

    Policy configuration
  5. Apply the changes.

  6. Open Command Prompt and run the following command: gpupdate /force.

    The policy changes you have made will take effect immediately.