Auditing of Account Management: Distribution Group Management events on failure should be enabled or disabled as appropriate. This security policy setting determines whether the operating system generates audit events for the following distribution group management tasks: A distribution group is created, changed, or deleted. A member is added to or removed from a distribution group. This subcategory is logged only on domain controllers. Fix: (1) GPO: Commandline: auditpol.exe (2) REG: NO INFO