Auditing Admins in Active Directory

An external auditor is requiring that we be able to audit administrator activity on our AD network while restricting the authority from the admins to turn off the auditing when they want to to cover their tracks. We’re looking for a way to do this without using a 3rd party. Any help would be appreciated. Thanks