enable auditing. audit policy changes - both failure and success. and pay attention to the date and times.