where are ad audit logs?
To track Active Directory user account changes, Open “Windows Event Viewer” Go to “Windows Logs” ➔ “Security” In the right pane, click “Filter Current Log” option to list the relevant events.