Default Domain Controller GPO snap-in. Enabling Auditing on All DCs You can modify the audit policy for DCs.
To enable auditing:
In the scope pane, select Audit Policy. In the result pane, double-click Audit directory service access. Select Audit Failed Attempts, and click OK. The settings should be updated in the result pane. Close the console loaded with the Default Domain Controller GPO snap-in. When prompted to save console settings, click No.
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
Auditing in Windows 2000