Auditing of DS Access: Directory Service Access events on failure should be enabled or disabled as appropriate. This policy setting detemines whether the operating system generates audit events when an Active Directory Domain Services (AD DS) object is accessed. These events are similar to the Directory Service Access events in previous versions of Windows Server operating systems. Fix: (1) GPO: Commandline: auditpol.exe (2) REG: NO INFO