Hello everyone, I had a couple questions regarding auditing for our domain controller.
First is it possible to audit object access and login from standard admins and for a domain admin. I work at a medical practice and run our 2008 r2 server, we want to setup a better system for what account can control and change settings in GPO/AD. We need
to audit these accounts and what they access and when they log in. I have tried auditing policy through GPO but I haven't gotten it to work correctly or at all really. I have a Domain Admin, and 2 normal admin accounts that need to be audited for all actions.
I don't currently need to audit the rest of the users on the domain.
Also I will add that I am not an IT professional so I am learning as I go, sorry if this made 0 sense.