TechSpot

Active Directory Auditing software

By Angrybird
Jul 25, 2013
Post New Reply
  1. I want to track all my AD logs also It should give full audit of changes/modifications/deletions made to active directory and can I filter these changes by administrator who made them?
    Any Input would be appreciated
  2. jobeard

    jobeard TS Ambassador Posts: 13,407   +314

    On the AD Server, locate the log(s) of interest
    • right-click->properties->Security Tab
    • click Advanced button at the bottom
    • on the Auditing Tab click Add
    • insert user id or group id to monitor
    • scroll to find Create Files / Write Data [x] and
    • Create Folders / Append Data [x]

    audit will be in the Event Viewer and there are scripting tools to extract specific events of your choice
  3. Angrybird

    Angrybird TS Rookie Topic Starter

    For this I think we can only monitor single user or group user's activity
    what if we have number of computers and over 1500 users in the network Then I need to apply this setting for each user or any other way aground is there ??
  4. jobeard

    jobeard TS Ambassador Posts: 13,407   +314

    those changes would be on the AD Server itself, not the client systems


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.