Endpoint Administration Guide for Windows › Monitoring and Auditing › What CA ControlMinder Audits › What CA ControlMinder Audits in Full Enforcement Mode

What CA ControlMinder Audits in Full Enforcement Mode

In Full Enforcement mode (regular operation), CA ControlMinder logs events as follows:

• If Warning mode is turned off for the intercepted resource, CA ControlMinder enforces rules and logs the events based on the audit property of the resource or user.

• If Warning mode is turned on for the intercepted resource, a record is written to the audit log if an access request violates an access rule (if the rules were enforced, the request would have failed). The audit record mentions that the violation was permitted because Warning mode is in effect.

  Rules are not enforced in this mode.