The subcategories for audit policies are not enabled for a windows 2008 r2 server.
When enabled, they revert back to not enabled after gpupdate /force executed on the server.
Local policy is not defined. Confirmed default domain and server policies are also not defined. Also confirmed the GPOs linked and filtered to the Server's OU that the windows 2008 r2 server resides and the force audit policy subcategory settings to override audit policy category settings is not defined. Windows 2008 domain and functional level on windows 2008 sp1 domain controllers.
Any help why I'm not able to set the subcategories or what i've missed from a GPO perspective that is overriding the local server settings would be greatly appreciated