what is auditing windows server?
Windows auditing is a mechanism for tracking events. ... Audit directory service access – audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) specified. Audit logon events – audit each instance of a user logging on to or logging off from a computer.