Only one person needs full-time admin privileges: the admin. Other users, however, can elevate their privileges for certain tasks. Keep track of who's doing what by enabling auditing pro¬cess creation, a subcategory of the detail tracking category in security auditing. Get full instructions by searching for "auditing AD DS changes" at Microsoft's TechNet site:/technet.

Name:  Track elevated privileges.jpg
Views: 43
Size:  27.4 KB