Question

  • Creator
    Topic
  • #2210296

    Active Directory Change Auditing: Is It Important?

    Locked

    by harold123 ·

    We recently began looking into third-party solutions for enhanced Active Directory change auditing, and given our lacking IT budget, I’m curious to know if you find this to be a primary necessity? For obvious reasons (mainly security and compliance), it’s important to know what’s going on within Active Directory, but I’m wondering if you’re auditing changes, and if so, how you’re doing it.
    Thanks!
    Harold

All Answers

  • Author
    Replies
    • #2843952

      Clarifications

      by harold123 ·

      In reply to Active Directory Change Auditing: Is It Important?

      Clarifications

    • #2843906

      It depends

      by robo_dev ·

      In reply to Active Directory Change Auditing: Is It Important?

      If there are not all that many changes, then simply enable auditing and archive your logs….you can get most of what you need in the event logs.

      If there are lots of changes, and lots of administrators, then an AD tool would be very useful.

    • #2876939

      Active Directory Change Audits

      by cagjax ·

      In reply to Active Directory Change Auditing: Is It Important?

      While a tool is helpful, there are basic considerations you can do as well. Limiting the number of privileged accounts, who has access to what, limit service accounts and what they can do using group policies, require documentation and review. While those steps are not foolproof, they are a start in the right direction.

Viewing 2 reply threads