The syslog-ng 3.0 Administrator Guide

Procedure 5.11.2.1. Turning on security logging for domain controllers

1. Login as an administrator.

2. Click Start, point to Programs, point to Administrative Tools, and click Active Directory Users and Computers.

3. In the console tree, click Domain Controllers.

4. Click Action, then click Properties.

5. On the Group Policy tab, select the policy you want to change, and click Edit.

6. In the Group Policy window, in the console tree, click Audit Policy.

7. Right-click the attribute or event you want to audit on the details pane.

8. Set the desired options in the Properties.

9. Repeat Steps 7-8 for every other event you want to audit.