What sort of built-in auditing capabilities does AD have? (Who changed what and when, etc)

I found this - http://www.windowsecurity.com/articles/Windows-Active-Directory-Auditing.html Is there anything further or better I can be doing? Thanks again!

Hi, The following information could be helpful for you to better understand auditing: Auditing overview http://technet.microsoft.com/en-us/library/cc776489(WS.10).aspx Auditing Policy http://technet.microsoft.com/en-us/library/cc779526(WS.10).aspx AD DS Auditing Step-by-Step Guide http://technet.microsoft.com/en-us/library/cc731607(WS.10).aspx How to use Group Policy to configure detailed security auditing settings for Windows Vista-based and Windows Server 2008-based computers in a Windows Server 2008 domain, in a Windows Server 2003 domain, or in a Windows 2000 domain. http://support.microsoft.com/kb/921469 Thanks.