Asi by ti mohlo pomoct toto:

admnistrative tools -> local security settings -> local policies -> audit policy