Hi

Can anyone advise as to which Windows 2008 audit settings are required to see events being generated (into ELA) for amending, deleting and creating OU's & Group Policy. Currently nothing is being generated in ELA.

I do have DSA and Policy Change set to Success within Auditing Policy. Plus in "advanced audit policy" I have:

DS Access set to:

Audit DS Access (Success)

Audit DS Changes (Success)

Policy Change set to:

Audit Audit Policy Change (Success & Failure)

Audit Authentication Policy Change (Success & Failure)

Audit Authorization Policy Change (Success)

Thanks