Return
-
Title
Does Change Auditor for Active Directory capture the same event details that shows in Windows Event Logs? -
Description
Does Change Auditor for Active Directory capture the same event details that shows in Windows Event Viewer Security logs or will it provide more? -
Cause
N/A -
Resolution
Change Auditor does not rely on Windows event logs.
The information collected by Change Auditor should however (generally speaking) match the details contained in the Windows event log and/or extend the amount of usable information about a particular change. For example, Change Auditor events may contain Initiator information (in some cases) or other data not present in the native event log.