diff --git a/configure b/configure
index dbc520d94c..b423e1a427 100755
--- a/configure
+++ b/configure
@@ -1001,6 +1001,7 @@ enable_api_ms_win_eventing_controller_l1_1_0
 enable_api_ms_win_eventing_provider_l1_1_0
 enable_api_ms_win_eventlog_legacy_l1_1_0
 enable_api_ms_win_ntuser_dc_access_l1_1_0
+enable_api_ms_win_security_audit_l1_1_1
 enable_api_ms_win_security_base_l1_1_0
 enable_api_ms_win_security_base_l1_2_0
 enable_api_ms_win_security_lsalookup_l1_1_0
@@ -17673,6 +17674,7 @@ wine_fn_config_dll api-ms-win-eventing-controller-l1-1-0 enable_api_ms_win_event
 wine_fn_config_dll api-ms-win-eventing-provider-l1-1-0 enable_api_ms_win_eventing_provider_l1_1_0
 wine_fn_config_dll api-ms-win-eventlog-legacy-l1-1-0 enable_api_ms_win_eventlog_legacy_l1_1_0
 wine_fn_config_dll api-ms-win-ntuser-dc-access-l1-1-0 enable_api_ms_win_ntuser_dc_access_l1_1_0
+wine_fn_config_dll api-ms-win-security-audit-l1-1-1 enable_api_ms_win_security_audit_l1_1_1
 wine_fn_config_dll api-ms-win-security-base-l1-1-0 enable_api_ms_win_security_base_l1_1_0
 wine_fn_config_dll api-ms-win-security-base-l1-2-0 enable_api_ms_win_security_base_l1_2_0
 wine_fn_config_dll api-ms-win-security-lsalookup-l1-1-0 enable_api_ms_win_security_lsalookup_l1_1_0
diff --git a/configure.ac b/configure.ac
index 23702d6f8b..c665bb31c3 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2777,6 +2777,7 @@ WINE_CONFIG_DLL(api-ms-win-eventing-controller-l1-1-0)
 WINE_CONFIG_DLL(api-ms-win-eventing-provider-l1-1-0)
 WINE_CONFIG_DLL(api-ms-win-eventlog-legacy-l1-1-0)
 WINE_CONFIG_DLL(api-ms-win-ntuser-dc-access-l1-1-0)
+WINE_CONFIG_DLL(api-ms-win-security-audit-l1-1-1)
 WINE_CONFIG_DLL(api-ms-win-security-base-l1-1-0)
 WINE_CONFIG_DLL(api-ms-win-security-base-l1-2-0)
 WINE_CONFIG_DLL(api-ms-win-security-lsalookup-l1-1-0)
diff --git a/dlls/api-ms-win-security-audit-l1-1-1/Makefile.in b/dlls/api-ms-win-security-audit-l1-1-1/Makefile.in
new file mode 100644
index 0000000000..6f4a216bdd
--- /dev/null
+++ b/dlls/api-ms-win-security-audit-l1-1-1/Makefile.in
@@ -0,0 +1 @@
+MODULE    = api-ms-win-security-audit-l1-1-1.dll
diff --git a/dlls/api-ms-win-security-audit-l1-1-1/api-ms-win-security-audit-l1-1-1.spec b/dlls/api-ms-win-security-audit-l1-1-1/api-ms-win-security-audit-l1-1-1.spec
new file mode 100644
index 0000000000..1e677eda9b
--- /dev/null
+++ b/dlls/api-ms-win-security-audit-l1-1-1/api-ms-win-security-audit-l1-1-1.spec
@@ -0,0 +1,15 @@
+@ stub AuditComputeEffectivePolicyBySid
+@ stub AuditEnumerateCategories
+@ stub AuditEnumeratePerUserPolicy
+@ stub AuditEnumerateSubCategories
+@ stub AuditFree
+@ stub AuditLookupCategoryNameW
+@ stub AuditLookupSubCategoryNameW
+@ stub AuditQueryGlobalSaclW
+@ stub AuditQueryPerUserPolicy
+@ stub AuditQuerySecurity
+@ stub AuditQuerySystemPolicy
+@ stub AuditSetGlobalSaclW
+@ stub AuditSetPerUserPolicy
+@ stub AuditSetSecurity
+@ stub AuditSetSystemPolicy
diff --git a/tools/make_specfiles b/tools/make_specfiles
index c12a3aef07..3fe7a283c5 100755
--- a/tools/make_specfiles
+++ b/tools/make_specfiles
@@ -118,6 +118,7 @@ my @dll_groups =
   "api-ms-win-eventing-controller-l1-1-0",
   "api-ms-win-eventing-provider-l1-1-0",
   "api-ms-win-eventlog-legacy-l1-1-0",
+  "api-ms-win-security-audit-l1-1-1",
   "api-ms-win-security-base-l1-2-0",
   "api-ms-win-security-lsalookup-l1-1-0",
   "api-ms-win-security-sddl-l1-1-0",