Chat now with support
Chat with Support

Change Auditor 7.3 - Whats New

What's New in Change Auditor 7.3 What's New in Change Auditor 7.2 What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0

Certificate authentication for Office 365

Due to the fact that basic authentication has been deprecated by Microsoft for Office 365 Exchange Online, certificate authentication is now required for Office 365 auditing. Newly created auditing templates and the associated web application will have the required permissions and certificate. However, If you are using an existing web application, you will need to provide a certificate and ensure that it has the required permissions. See the Change Auditor Office 365 and Azure Active Directory Auditing User Guide for details.

* 
NOTE: Microsoft’s .NET Framework 4.7.1 is required for Office 365 auditing templates in the Windows client or through PowerShell commands.

The following events have also been added:

•
Azure Active Directory web application certificate created
•
Office 365 auditing web application certificate changed

Active Directory Federation Services auditing enhancements

New Active Directory Federation Services - Endpoints events:

•
Endpoint enabled
•
Endpoint disabled
•
Endpoint Proxy enabled
•
Endpoint Proxy disabled

New Active Directory Federation Services - Server Farm events:

•
Server Farm Node added
•
Server Farm Node Primary Computer Name changed
•
Server Farm Node Primary Computer port changed
•
Server Farm Node removed
•
Server Farm Node Role changed
•
Server Farm Node Synchronization Frequency changed

New Active Directory Federation Services - Claims Provider Trust events:

•
Claims Provider Trust added
•
Claims Provider Trust deleted
•
Claims Provider Trust enabled
•
Claims Provider Trust disabled
•
Claims Provider Trust changed

New built-in searches:

•
All Authentication Method events in the last 30 days
•
All Relying Party Trust events in the last 30 days
•
All Endpoint events in the last 30 days
•
All Claims Provider Trust events in the last 30 days

Foreign forest support

The following is supported in environments where a coordinator does not exist in the foreign forest where agents are deployed:

•
Ability to select objects in a foreign forest in the Exchange protection wizard.
•
Ability to select objects in a foreign forest in the Group Policy protection wizard.
•
Users are notified in the client when the foreign forest cannot be contacted when performing a “Force Refresh”.
•
Support for foreign forest objects in the Add-CASearch and Set-CASearchProperties commands.

Additional events

Events to audit when a change is made to the coordinators selected for purge, archive or report jobs:

•
Coordinator added to scheduled task processing
•
Coordinator removed from scheduled task processing
•
Scheduled task processing assignment changed
•
Scheduled task processing setting changed

Events to audit failed client logons:

•
Change Auditor unknown client logon failed
•
Change Auditor Windows client logon failed
•
Change Auditor web client logon failed
•
Change Auditor PowerShell client logon failed

Events to audit changes to the “Inheritance” option on the security tab for Active Directory objects:

•
Inheritance setting changed on computer object
•
Inheritance setting changed on group object
•
Inheritance setting changed on user object
•
Inheritance setting changed on AdminSDHolder object
•
Inheritance setting changed on OU object
•
Inheritance setting changed on group policy object

Internal events are now generated when changes are made to file system templates through PowerShell commands. Previously these events were only generated when changes were made through the Windows client.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating