Question

Locked

active directory tracking

By Andrewdixon ·
HI,
My company has Active Directory installed on Windows Server 2008 R2 Standard edition and currently has more than 150 users. I want to keep a track on the changes in AD objects like updation, move, reset, users, domain of active directory and also need to find out who created/deleted certain AD objects. Does Microsoft, in its native tool, gives this type of facility?
Thanks in advance

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Eventlolg

by Mohammad Oweis In reply to active directory tracking

You can utilize the eventlog to create an alert (send an email) when an event is created with specific event code (every operation has a unique code)

Collapse -

Auditing Active directory

by shawn.jen In reply to active directory tracking

Hi,
Yes, microsoft gives the facility to audit Active Directory domain services which shows old and new values when changes are made to objects and their attributes. For detailed info, click on
http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

If you talk about a managed, effective and accurate monitoring, you should get events or results for every single change in a systematic format. Moreover, for any change which may prove critical or may be dangerous for the AD environment, a rollbal option should be there to undone the change. Then it would be perfect if you go for any 3rd party utility tool. For more suggestions, look for advice from community.
Thanks

Collapse -

Active directory auditing

by Andrewdixon In reply to Auditing Active directory

Hi,
Thanks for your suggestion. I have tried the method given in the link, but the manual process is confusing and difficult and I have also checked out some communities but not comfortable with the result. So,it would be perfect if you suggest me any utility tool which will solve my issue and proves good for AD tracking.
Thanks

Collapse -

Audit active directory

by shawn.jen In reply to Active directory auditing

Hi Andrew,

Well, there are many AD tracking tools available. But, as you want a trouble-free yet efficient auditing, I can suggest you to go for a tool which best suits to your requirements.
Checkout the link below and get the free trial version of the tool-
http://www.activedirectoryaudit.com/
Thanks

Collapse -

3rd party tools

by Viktor_f In reply to Active directory auditing

Take a look at 3rd party tool's list here: http://www.techrepublic.com/blog/five-apps/five-apps-for-active-directory-management/#.

We had the same issue and bought Adaxes (http://www.adaxes.com/).

Back to Security Forum
6 total posts (Page 1 of 1)  

Security Forums