Triggering an audit event and changing the Windows Audit Policy