To add users or groups to the audit list
Open Registry Editor
Click the key you want to audit.
On the Edit menu, click Permissions.
Click Advanced, click the Auditing tab, and then click Add.
Click Object Types, select the type or types of users or groups you want to find, and then click OK.
Click Locations, select the computer or domain of the users or groups you want to view, and then click OK.
Type the name of the user or group you want to add and then click OK to open the Auditing Entry dialog box, or click Advanced to search for a user, computer, or group based on parameters you set.
Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on your computer.
To open Registry Editor, click Start, click Run, type , and then click OK.
You must be logged on as an administrator or a member of the Administrators group to complete this procedure. If your computer is connected to a network, network policy settings may also prevent you from completing this procedure.
You must first add a user or group before specifying which events to audit.