Audit Active Directory Usage

Hi,

i 'd like to know if Symantec DLP is able to monitor and audit Active Directory activities. I explain my question with examples: is Symantec DLP able to

- Monitor AD objects changes (OU creation, Group Policy change, ecc...) ?

- Monitor AD User Add and delete ?

- Monitor AD user right changes ?

- Create reports on all these activities to identify the user who made changes ?

I also need to know which DLP component do this work (if present)

Thank you in advance.