How Do I Enable Object Access Auditing

Navigate Windows Explorer to the file you want to monitor.Right-click on the target folder/file, and select Properties.Security → Advanced.Select the Auditing tab.Click Add.Select the Principal you want to give audit permissions to.In the Auditing Entry dialog box, select the types of access you want to audit.

How do I enable audit other object access events?

To audit Scheduled Tasks: Select Object Access → Other Object Access Events (Success). To audit Local Policy Changes: Select Policy Change → Authentication Policy Change (Success), Authorization Policy Change (Success), Audit Policy Change (Success).

How do I enable auditing in Active Directory?

Go to Computer Configuration → Policies → Windows Settings → Security Settings → Local Policies → Audit Policies. Select Audit object access and Audit directory service access. Select both the Success and Failure options to audit all accesses to every Active Directory object.