You need to design a method to log changes that are made to servers and domain controllers. You also need to track when administrators modify local security account manager objects on servers. What should you do？（）

A. Enable failure audit for privilege user and object access on all servers and domain controllers
B. Enable success audit for policy change and account management on all servers and domain controllers
C. Enable success audit for process tracking and logon events on all servers and domain controllers
D. Enable failure audit for system events and directory service access on all servers and domain controller