Windows default audit policies - how to modify?

[lfm]

Hi

Trying to track some update command from various software that cause Cubase to get audio dropouts and simply stop recording.

I can turn this on - found how - but also get some default policies that are unwanted - like Detailed Tracking for process, which is what I try to do on a couple of EXE-files of my choice.

So I found a command that is superset of Local Security Policy running the GPEDIT.MSC but still see nothing set like table here shows:
https://docs.microsoft.com/en-us/window ... mendations

Looking Windows Default column you can see those settings and Detailed Tracking for processes.

But where do you modify these so I get Tracking Process only on those I choose?
Everywhere I looked, I see nothing turned on. If I turn on Tracking Process I always get audit on all executions of processes it seems - not just the ones I entered in SACL.

I tried GPMC.MSC but it does not exist. Supposed to be global policy, and you can probably do on multiple machines in network and whatnot.

A Windows component to install to get access to more, or?

Thanks.