How to Audit Delegated Access in Active Directory?
Mike,
First of all, thanks for writing such an effective article in such a simple fashion - very nice job!
You have so rightly said that "Putting the wrong privileges in the wrong hands could lead to a complete rebuild of your domain. That???s why it???s important to take three simple steps to better protect your AD implementation ??? plan, delegate, and audit"
My question is that when you mention "audit", I think you're referring to audit"ing" and opposed performing an audit of who delegated powers in Active Directory. While audit"ing" is clearly important, I think it is also super-important to be able to audit delegated access in Active Directory.
We have been looking for ways to do this for a while now, so I thought I would ask you if you can help us find out how to audit (not the one in audit"ing") delegated access in Active Directory.
The best resource, I have found thusfar is a discussion on "How to find out who is delegated what access in our Active Directory?" on a community forum called "www.ActiveDirSec.Org"
As a Tech Replubic specialist, I look forward to your thoughts on this question.
Thanks Mike!
- Jonathan
