Get the Whitepaper called Auditing Microsoft Domain Environment.
You can download it from the following link: https://packetstormsecurity.com/files/download/150874/auditing-ms-domain.pdf
Source: https://packetstormsecurity.com/files/150874/Auditing-Microsoft-Domain-Environment.html