Operating Systems Security

Discussion - Auditing

Thinking about different sized organizations.

What do you think are the advantages to having accounting/auditing logs?

Would the needs be different based on different sized organizations?

Would you be able to generate a single policy for auditing on all of the Windows desktops in your organization? Why or why not?

Are there any disadvantages to having/keeping this information?