# Audit Active Directory in windows

{% embed url="https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/use-audit-active-directory-objects-track-events" %}

`auditpol.exe /get /category:*`

<figure><img src="https://2273033137-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGlSezkssK5aHdG6Al3xJ%2Fuploads%2FcV2h0skeSSeJH7eeKaoP%2Fimage.png?alt=media&#x26;token=c8f5bafd-b79f-4527-a240-bbaf2a487d4d" alt=""><figcaption></figcaption></figure>

Enable the Security Auditing&#x20;

{% embed url="https://www.lepide.com/how-to/enable-active-directory-security-auditing.html" %}

Enable global audit policy&#x20;

{% embed url="https://www.lepide.com/how-to/enable-active-directory-security-auditing.html" %}
