Quest has been named as an ASP "Ten Best Web Support Sites" award winner. Learn more.

Change Auditor - Knowledge Base

Filter Your Results
Search All Products

Self Service Tools
Knowledge Base
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
Featured Content
IT Security Search Support
Contact Support
Contact Support

Search Knowledge Base by keyword

(Choose different product)



Sort By Last Updated
Displaying 1-25 of 1469
Permission of ChangeAuditor Operators not work until the IIS server restart (230984)

When an Accounts were added to the group of Change Auditor Operators , suppose those accounts can login to the web client, but can't unless the IIS Service been restarted then the setting will work. On the web page "you are not authorized to view this page". ...

Product(s): Change Auditor
Last Updated On: 8/17/2017
(0 Ratings) 3 views
Is deploying a Change Auditor installation to Amazon Web Services supported? (227782)

Organizations moving to Amazon Web Services (AWS) may want to deploy the Change Auditor Coordinator and Change Auditor agents to AWS in order to monitor other servers in AWS such as Microsoft SQL server. Is this currently supported? ...

Product(s): Change Auditor
Last Updated On: 8/16/2017
(0 Ratings) 259 views
EMC Isilon file contents written events are not getting audited by Change Auditor. (232114)

EMC Isilon file contents written events are not getting audited by Change Auditor.. All other Isilon events are being recorded in Change Auditor (ex. file delete, file move, etc) except for file contents written. Auditing "Close" operations on Isilon are not enabled. ...

Product(s): Change Auditor
Last Updated On: 8/16/2017
(0 Ratings) 8 views
Minimum .net Framework requirement for Change Auditor 6.9 (232109)

What are the requirements to deploy the Change Auditor Coordinator for version 6.9.x? What are the requirements to deploy the Change Auditor Agent for version 6.9.x? What are the requirements to deploy the Change Auditor Client for version 6.9.x? Coordinator. ...

Product(s): Change Auditor
Last Updated On: 8/16/2017
(0 Ratings) 21 views
System pre-requisites are not met is displayed when deploying a Change Auditor 6.x agent (129193)

Attempts to deploy a Change Auditor 6.5/6.6/6.7/6.8 agent from the Change Auditor 6.5/6.6/6.7/6.8 Client fails with the Deployment Result "System pre-requisites are not met, install cannot be completed". Microsoft .Net Framework ...

Product(s): Change Auditor
Last Updated On: 8/16/2017
(1 Ratings) 6830 views
Browsing Active Directory object picker via the Change Auditor client results in duplicate or unexpected names on containers (232090)

When creating a search and browsing Active Directory using the AD Object Picker, some OUs do not have the same names as they do in Active Directory Users and Computer(ADUC). Further investigation may reveal that the ...

Product(s): Change Auditor
Last Updated On: 8/15/2017
(0 Ratings) 16 views
AD replication not working on servers with the Change Auditor agent (231729)

When the Change Auditor Agent is running, AD Replication stops working. When Procdump and Change Auditor Agent are running at the same time, this will stop AD replication from occurring between the windows servers that it is running on. Workaround. ...

Product(s): Change Auditor
Last Updated On: 8/14/2017
(0 Ratings) 4 views
New Agents Fail to connect to a new Coordinator Installation - Failed to open connection to coordinator at endpoint (195101)

In a new Installation of Change Auditor, the Agents are not connecting to the Coordinator. Upon reviewing the ChangeAuditor.dll.nptlog the following warning is recorded: Failed to open connection to coordinator at endpoint 'net.tcp://**51429/Agent/v1'. ...

Product(s): Change Auditor
Last Updated On: 8/11/2017
(0 Ratings) 1388 views
How to exclude events as originating by "nt authority\anonymous from a report? (149306)

Events originating by "nt authority\anonymous login" are showing up in a report, how may I filter these events? Prefer not to use a global exclude using the Exclude Accounts option Workaround: Open the search/report properties. ...

Product(s): Change Auditor
Last Updated On: 8/10/2017
(0 Ratings) 1024 views
How to allow NT AUTHORITY\ANONYMOUS LOGON to access protected objects (231995)

Events showing 'Failed Attempt to Modify Protected Active Directory Object' for activities by User: NT AUTHORITY\ANONYMOUS LOGON. Need to add this system account to the 'Override Account' list. 1. Edit the protection template in question. ...

Product(s): Change Auditor
Last Updated On: 8/10/2017
(0 Ratings) 6 views
How to configure a search for "User employeeID changed" (207569)

Administrators may need to configure a Change Auditor search for "User employeeID changed" events. "User employeeID changed" is not captured by default, the event class must be moved from the Unmonitored to the Monitored Attributes list using the following steps. ...

Product(s): Change Auditor
Last Updated On: 8/9/2017
(0 Ratings) 682 views
Can Change Auditor monitor when someone adds a delegate mailbox to their Outlook client? (179946)

Can CA report on when users add another mailbox to their Outlook client? Change Auditor is not capable of reporting on when a mailbox is added to Outlook, however if that mailbox has been added to the list of mailboxes being ...

Product(s): Change Auditor
Last Updated On: 8/8/2017
(0 Ratings) 1062 views
Excluded Accounts using wild cards (67320)

How to exclude computer account initiated changes from auditing via Excluded Accounts wizard. Audit event noise created by computer accounts. Events can be excluded by types (Facility) or individually depending on the situation. ...

Product(s): Change Auditor
Last Updated On: 8/7/2017
(0 Ratings) 1721 views
Do Change Auditor support auditing SSIS Package modifications (230616)

While not being mentioned in our documentation, based on Microsoft KB, it should be possible to monitor via File System auditing. The file-system folder where SSIS packages reside could be audited (if File System Auditing ...

Product(s): Change Auditor
Last Updated On: 8/2/2017
(0 Ratings) 17 views
Change Auditor Agent is unable to connect to the Coordinator (114486)

The Change Auditor Agent is unable to connect to the Change Auditor Coordinator and the following error is recorded in the Change Auditor Agent log: 5.x. Message: Connection attempt (NPRepository4(DEFAULT)/ CHANGEAUDITOR)/W-001.xyz.com) failed. ...

Product(s): Change Auditor
Last Updated On: 7/21/2017
(0 Ratings) 21040 views
Change Auditor agent cannot access Azure tenant due to Internet proxy (231055)

Consider the following scenario... 1. Attempt to assign a Change Auditor agent to communicate with the azure tenant. 2. The following error occurs within the Change Auditor client: "Agent "Server1.domain.com" was unable to communicate with Azure Active Directory.". ...

Product(s): Change Auditor
Last Updated On: 7/19/2017
(0 Ratings) 75 views
How to enable an Alert for a search (231367)

How to enable Alerting for a search. Administrator wishes to enable an alert for a search The following steps will create an alert enabled search: 1. For any search, in the search properties select the Alert tab. 2. Place a check mark in the SMTP option. ...

Product(s): Change Auditor
Last Updated On: 7/18/2017
(0 Ratings) 11 views
ADUC hangs when a member is added to a group protected by Change Auditor (231359)

An AD object is set to be protected using protection, however, when a user attempts to change the protected object, ADUC stops responding. The change to the object is prevented. Product defect. WORKAROUND. None. STATUS. ...

Product(s): Change Auditor
Last Updated On: 7/18/2017
(0 Ratings) 7 views
ARS Initiator information is not populated for changes to deprovisioned objects (217632)

ARS Initiator information is not populated for changes to deprovisioned objects This behavior is currently by design. WORKAROUND. Active Roles Change History may be referenced to check the Initiator related to modifications to deprovisioned objects. STATUS. ...

Product(s): Change Auditor
Last Updated On: 7/17/2017
(0 Ratings) 340 views
Unhandled exception occurs when copying and pasting credentials in Change Auditor Client window (212318)

Within the Agent Statistics tab for example, right click on a server (the logged in user would not have full access to) and select Logs | View Agent Log, a credentials window will appear. If credentials are pasted in the User, Password ...

Product(s): Change Auditor
Last Updated On: 7/17/2017
(0 Ratings) 643 views
How to create a File System Template (205116)

This document will provide the steps for creating a Change Auditor File System Template. Complete the following steps for to create a File System Template: Select “Auditing” | “File System” in the Administration Task tab of the Change Auditor client. ...

Product(s): Change Auditor
Last Updated On: 7/14/2017
(0 Ratings) 741 views
As CA Operator, I want to see events for calendar modifications in resource mailboxes when handled by auto-attendant (231294)

As CA Operator, I want to see events for calendar modifications in resource mailboxes when handled by auto-attendant (MS Exchange Mailbox Assistant service). Enhancement request. WORKAROUND. None. STATUS. Enhancement ...

Product(s): Change Auditor
Last Updated On: 7/14/2017
(0 Ratings) 10 views
How to configure SQL Data Level Audit (183316)

This document describes the steps for configuring SQL data level Audit in Change Auditor Complete the following steps to configure SQL data level Auditing: Select Auditing | SQL Data Level in the left pane of the Administration Task tab. ...

Product(s): Change Auditor
Last Updated On: 7/14/2017
(0 Ratings) 886 views
Lockedout Event not showing the right source computer data (231274)

In some cases, Change Auditor is showing a an incorrect source computer for a Locked Out Event. This issue is not caused by Change Auditor but by the way the event is created in Active Directory. Change Auditor Agent uses a DLL Hook to capture data directly from LSASS.exe ...

Product(s): Change Auditor
Last Updated On: 7/14/2017
(0 Ratings) 27 views
Delay in O365 audit events becoming available in Change Auditor (231268)

Office 365 audit events are not searchable in Change Auditor for hours after the changes take place. Expected behavior. Change Auditor cannot collect audit events from O365 until they become available in the audit trail in O365. ...

Product(s): Change Auditor
Last Updated On: 7/13/2017
(0 Ratings) 13 views