Audit policy change This security setting determines whether to audit every incident of a change to user rights assignment ...

Audit policy change  This security setting determines whether to audit every incident of a change to user rights assignment policies, audit policies, or trust policies.  If you define this policy setting, you can specify whether to audit successes, audit failures, or not audit the event type at all. Success audits generate an audit entry when a change to user rights assignment policies, audit policies, or trust policies is successful. Failure audits generate an audit entry when a change to user rights assignment policies, audit policies, or trust policies fails.  To set this value to No auditing, in the Properties dialog box for this policy setting, select the Define these policy settings check box and clear the Success and Failure check boxes.  Default:  Success on domain controllers. No auditing on member servers.