You can configure event audit on Windows devices for an individual device or for all devices in a domain.
This section describes how to configure an audit on an individual device and how to use a domain group policy to configure an audit.
In this section
Configuring an audit policy on a Windows device
Configuring an audit using a group policy