You need to ensure that an entry is added to the event log whenever a local user account is created or deleted on Server1
You need to ensure that if a group Managed Service Account resets a password of a domain user account, an audit entry is created
You need to ensure that a user named User1 receives an email notification when the threshold is exceeded