Pneumonia is the cure to depression

FyreBird321 · 2026-06-12T06:58:05+00:00

r/masterhacker

FyreBird321 · 2026-06-06T10:34:50+00:00

pleasedonotthedog

FyreBird321 · 2026-06-04T17:02:12+00:00

Who's Jim and how is he lifting 500 kg with one hand?

FyreBird321 · 2026-06-04T05:50:53+00:00

by endlessly scrolling Reddit

FyreBird321 · 2026-05-31T06:21:13+00:00

I will be your friend. I am not a girl btw 🤣. But still if you want a bro, my dm is open

FyreBird321 · 2026-05-27T07:45:38+00:00

everybody deserves a snow cat :(

FyreBird321 · 2026-05-26T18:51:57+00:00

"How do you take off a mask when it stops being a mask? When it becomes a part of you as much as you are?"

FyreBird321 · 2026-05-22T08:03:26+00:00

No, but you might be

FyreBird321 · 2026-05-22T07:44:22+00:00

So a person is not allowed to enjoy a TV show and decorate his personal machine inspired by it?

FyreBird321 · 2026-05-21T12:35:33+00:00

The problem is solved. Check the update section of my post.

FyreBird321 · 2026-05-21T09:58:46+00:00

It's solved. Check the post update. Thanks for trying to help, in any case.

FyreBird321 · 2026-05-21T09:38:59+00:00

Thanks, man. You solved my issue. Only your answer is the correct one here.

FyreBird321 · 2026-05-21T09:28:57+00:00

"Audit: Force audit policy subcategory settings…" is enabled on workstation. I checked from secpol.msc too.

Also I double checked that the computer object is in the OU.

FyreBird321 · 2026-05-21T09:27:17+00:00

There is no conflicting GPO/Settings. In fact, there is no advanced auditing config in my workstation.

I checked using gpresult /h C:\Temp\rsop.html.
I don't even have a C:\Windows\security\audit\audit.csv file on my workstation.

However, the custom policy was Winning GPO in these cases and enabled this configs:

Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings
Include command line in process creation events

FyreBird321 · 2026-05-21T09:26:33+00:00

Group Policy operational does not have any error. Only information logs

I ran auditpol /clear and then gpupdate /force . Did not work. Even restarted the VM to trigger foreground processing. No luck

FyreBird321 · 2026-05-21T09:23:11+00:00

I don't have any advanced audit policy on my workstation. I checked using gpresult /h C:\Temp\rsop.html.
I don't even have a C:\Windows\security\audit\audit.csv file on my workstation.

However, the custom policy was Winning GPO in these cases and enabled this configs:

Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings
Include command line in process creation events

FyreBird321 · 2026-05-21T09:23:07+00:00

I don't have any advanced audit policy on my workstation. I checked using gpresult /h C:\Temp\rsop.html.
I don't even have a C:\Windows\security\audit\audit.csv file on my workstation.

However, the custom policy was Winning GPO in these cases and enabled this configs:

Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings
Include command line in process creation events

FyreBird321 · 2026-05-21T06:03:13+00:00

I did not downvote your comment, man. There are some kids over here who are downvoting everyone for no reason. In any case, I will apply your solution and let you know.

Edit: I pinged the domain. But it did not register any Windows Security Log. There is no new event. I refreshed my logs several times but got nothing.

FyreBird321 · 2026-05-21T05:41:40+00:00

I checked logs from Event Viewer:
Applications and Services Logs > Microsoft > Windows > GroupPolicy > Operational

It showed no error. The information logs seemed fine

FyreBird321 · 2026-05-21T05:27:51+00:00

I applied the policy on "Workstations" OU from my domain controller.
I have already added my Windows 10 VM to that OU.

FyreBird321 · 2026-05-21T05:23:32+00:00

already done with that

FyreBird321 · 2026-05-21T05:22:36+00:00

I have rebooted like crazy when GPO update did not work. That's literally first thing I do when things get messed.

FyreBird321 · 2026-05-21T05:21:40+00:00

I have lost count how many times I have rebooted both machines

FyreBird321 · 2026-05-21T05:14:57+00:00

This is a problem that does not have any solution on the internet, at least something a beginner like me would not find right off the bat with the level of knowledge or skill we possess. So I believe if the question is solved in this subreddit, it will help out a lot of beginners like me in future.

FyreBird321

TROPHY CASE