Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Can the default objects excluded from the AD Queries be included?
Description
By default the following objects are excluded from AD Query Auditing:
DomainName/Configuration/Schema
DomainName/Configuration
DomainName/RootDSE
DomainName/System/Policies
What would be the impact of including these objects in the the AD Query Auditing?
Resolution
Removing the default exclusions may have a severe impact on your database both in terms of load and for growth. There can be a significant increase on the load on your agents that are installed on your domain controllers as well. This will also result in an increased amount of traffic from the agents to the coordinator and then from the coordinator to the database.
The DCs may become slower in terms of responsiveness. The amount of impact completely depends on your environment, however these objects have been excluded by default due to the known amount of excessive traffic and noise they can cause in regards to AD Queries.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
Change Auditor
7.4, 7.3, 7.2, 7.1.1, 7.1
Topic(s):
Best Practices
Article History:
Created on: 8/1/2018 Last Update on: 1/25/2024
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to Quest Support
You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The Quest Software Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.