Hi,
You have to create a GPO to enable the setting Audit object access and set required SACL.
You can refer to the following links to have more details about gpo setting and SACL required to enable the audit.
how-to-audit-changed-permissions-on-ntfs-folders-the-best-way
Please don't forget to mark helpful reply as answer