Why advance Audit polices doesn't work properly after backup and import from different domain

For one, some policy components might be domain-specific. Security principals, WMI filters, links, permissions, and other references may not map correctly in the target domain, causing parts of the GPO to be ignored or applied incorrectly.

Another potential issue is that Advanced Audit Policy requires the target systems to have the Audit: Force audit policy subcategory settings to override audit policy category settings security option enabled. If this setting is missing, legacy audit policy settings can override the imported advanced audit subcategories.

There are also differences in the target environment, such as conflicting local policies, other GPOs with higher precedence, or missing Central Store ADMX files, which can affect the resulting audit configuration. After importing the GPO, verify the effective settings with gpresult /h, auditpol /get /category:*, and Event Viewer to confirm that the intended audit subcategories are actually being applied.

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin