TechSpot

Active Directory Auditing software

By Angrybird
Jul 25, 2013
Post New Reply
  1. I want to track all my AD logs also It should give full audit of changes/modifications/deletions made to active directory and can I filter these changes by administrator who made them?
    Any Input would be appreciated
     
  2. jobeard

    jobeard TS Ambassador Posts: 9,318   +618

    On the AD Server, locate the log(s) of interest
    • right-click->properties->Security Tab
    • click Advanced button at the bottom
    • on the Auditing Tab click Add
    • insert user id or group id to monitor
    • scroll to find Create Files / Write Data [x] and
    • Create Folders / Append Data [x]

    audit will be in the Event Viewer and there are scripting tools to extract specific events of your choice
     
  3. Angrybird

    Angrybird TS Rookie Topic Starter

    For this I think we can only monitor single user or group user's activity
    what if we have number of computers and over 1500 users in the network Then I need to apply this setting for each user or any other way aground is there ??
     
  4. jobeard

    jobeard TS Ambassador Posts: 9,318   +618

    those changes would be on the AD Server itself, not the client systems
     

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...