Follow these steps to configure the advanced security audit policy:
- Open the Group Policy Management Console (gpmc.msc).
- In the left pane, navigate to the Domain Controllers node for the domain in which you want to configure the advanced security audit policy.
- Right-click the Default Domain Controllers Policy and select Edit… from the menu.
The Group Policy Management Editor window opens.
- In the left navigation window, expand the Computer Configuration, Policies, Windows Settings, Security Settings, Advanced Audit Policy Configuration, Audit Policies, and then DS Access:
- Double-click the Audit Directory Service Changes ...