Domain authentication logging/security audit

[auckland1]

Would it be possible to put any type of log / audit in place to see who is using the Active Directory? I'd just like to run it for a week before we shut down the Active Directory.
Please explain how to setup the audit?

 

[Neemobeer]

You just enable "Audit directory service access" it's in Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit\Policy

 

[auckland1]

Its enabled but where I can see the events?

 

[Neemobeer]

In event viewer