Always audit application execution

If you want to collect information as events about started programs independent of the selected operation mode, choose Always audit application execution (independent of blocking mode) and check Enabled.

However, logging each successful program startup can slow down system performance. Sending all events to the DriveLock Enterprise Service also increases the network load and database size.