Change Auditor for Active Directory 7.1.1

Chat now with support

Live-Hilfe anfordern
Registrierung abschließen

Anmelden

Preisinformationen anfragen

Vertrieb kontaktieren

Introduction Change Auditor for Active Directory Events

Active Directory Database Active Directory Federation Services - Authentication Methods Active Directory Federation Services - Sign-in Active Directory Federation Services - Relying Party Trusts Configuration Monitoring Connection Object Custom AD Object Monitoring Custom Computer Monitoring Custom Group Monitoring Custom User Monitoring DNS Service DNS Zone Domain Configuration Dynamic Access Control Forest Configuration FRS Service Group Policy Item Group Policy Object IP Security NETLOGON Service NTDS Service Organizational Unit (OU) Replication Transport Schema Configuration Site Configuration Site Link Bridge Configuration Site Link Configuration Subnets SYSVOL

Log Events

InTrust for AD event log InTrust for ADAM event Log

Site Link Configuration

Table 27. Site Link Configuration events
Event	Description	Severity
Inter-site Compression Setting Changed	Created when the inter-site compression setting for a site link is changed.	Medium
Interval Changed	Created when a change is detected in the Interval attribute of a site link.	High
Link Cost Changed	Created when a change is detected in the cost attribute of a site link.	High
Schedule Changed	Created when a change is detected in the schedule attribute of a site link.	High
Site Added to Site List	Created when a site is added to a site list.	Medium
Site Removed from Site List	Created when a site is removed from a site list.	High

Subnets

Table 28. Subnets event
Event	Description	Severity
Subnet Site Assignment Changed	Created when the site association of a subnet is changed	Medium

SYSVOL

Table 29. SYSVOL events
Event	Description	Severity
SYSVOL Folder Access Rights Changed	Created when access to the SYSVOL folder has been changed via Access Control Settings for SYSVOL or Share Permissions. Disabled by default.	Medium
SYSVOL Folder Auditing Changed	Created when the SACL on the SYSVOL folder has been changed. Disabled by default.	Medium
SYSVOL Folder Ownership Changed	Created when ownership of the SYSVOL folder has been changed. Disabled by default.	Medium

Log Events

When event logging for Active Directory is enabled in Change Auditor, events will also be written to the InTrust® for AD event log. In addition, when event logging for ADAM (AD LDS) is enabled in Change Auditor, ADAM events will be written to the InTrust for ADAM event log. These log events can then be gathered by InTrust and Quest Knowledge Portal for further processing and reporting.


	NOTE: To enable event logging, select Event Logging on the Agent Configuration page (Administration Tasks tab), and select the type of event logging to enable.