Hi,

Is the something we can monitor in ADAudit? 

*Domain admin account creation
* Account and group deletion
* ACL modifications in AD (groups)
* ACL modifications in filesystem
* ACL modifications in mailboxes
* Where domain admins log on (servers)

Thanks

Erik