Set the Time interval in minutes for logging accounting dataID: oval:org.secpod.oval:def:18941 | Date: (C)2014-05-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The Set the Time interval in minutes for logging accounting data machine setting should be configured correctly.
This setting directs the Accounting feature to log data on the accounting server at the specified time interval. If you enable this setting, Windows System Resource Manager (WSRM) will set the accounting time interval to the value specified. If you disable this setting, the default value of 10 minutes will be set. If you do not configure this setting, the user may specify an accounting interval. The value is specified in minutes and can range between 2 minutes and 60000 minutes. Ten minutes is provided as the default value as this would be an optimal value if there are many servers logging data remotely. Setting an accounting record write interval value less than 10 minutes for a server on a network with more than 20 machines logging data remotely can possibly degrade performance.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows System Resource Manager\Set the Time interval in minutes for logging accounting data
(2) KEY: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM\RecordWriteInterval
Platform: |
Microsoft Windows Server 2008 R2 |