Auditing of Account Management: Application Group Management events on failure should be enabled or disabled as appropriate. Audit Application Group Management, which determines whether the operating system generates audit events when application group management tasks are performed. Application group management tasks include: * An application group is created, changed, or deleted. * A member is added to or removed from an application group. Fix: (1) GPO: Commandline: auditpol.exe (2) REG: NO INFO