COMMAND

    SCM

SYSTEMS AFFECTED

    WinNT 4.0

PROBLEM

    Raymond P. Galloni  found following.   There is a  bug in the  SCM
    that  sets  the  Registry  Key  value  for   FullPrivilegeAuditing
    incorrectly.  The issue exist when the SCM creates the  text-based
    .inf  file.   If  you  open  an  .inf  file for a template that is
    supposed to have the FullPrivilegeAuditing enabled, the file  will
    display the following result in the [Registry Values] section:

        MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing=3,31

SOLUTION

    In order for this setting to work the value needs to be changed in
    the ..inf file to:

        MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing=3,1

    The change is from "31" to "1".   All of the .inf files will  need
    to be updated to ensure this value is set correctly.