Audit policy for AD

are there best practices on audit in domain/ad security perspective?

what audit - , audit logs prove/disprove/prevent/detect etc.

are there guides microsoft on auditable options , benefits doing bring.

thanks

refer auditing security events best practices: auditing   at http://technet.microsoft.com/en-us/library/cc778162(ws.10).aspx and http://technet.microsoft.com/en-us/library/ee513968(ws.10).aspx 

hth
marcin

Windows Server  >  Directory Services