Chatee ahora con Soporte
Chat con el soporte
Herramientas de autoservicio
Base de conocimientos
Mi cuenta
Notificaciones y alertas
Soporte de productos
Descargas de software
Documentación técnica
Foros de usuarios
Tutoriales en video
Aviso de actualizaciones de páginas web (RSS)
Mi Cuenta
Mis grupos
Mis licencias
Mis productos
Mi perfil
Mi solicitud de servicio
Mis activos con garantía
Servicios
Servicios de consultoría
Servicios educativos
Servicios de soporte
Aspectos esenciales de soporte
Premios y testimonios
Introducción
Acuerdo de licencia
Guía de soporte

What's new for Change Auditor

Filtre para localizar actualizaciones para notas de la versión, guías, artículos de conocimiento, software, parches, utilidades o correcciones urgentes. (Seleccione un producto diferente)

Subscribe to the RSS


Arriba

Notificaciones

Nuevo

Ninguna en este momento

Revisado el

Ninguna en este momento

Arriba

Parches

Nuevo

Ninguna en este momento

Revisado el

Ninguna en este momento

Arriba

Documentación

Nuevo

Ninguna en este momento

Revisado el

Ninguna en este momento

Arriba

Versiones de software

Nuevo

Ninguna en este momento

Revisado el

Ninguna en este momento

Arriba

Artículos de la base de conocimientos

Nuevo
4362761 - Cannot delete a Search

When a Search is deleted it does go away, but after a re-start of the Client the Search is back.

Creada el: lunes, 22 de agosto de 2022
4361579 - Trying to monitor logon activity for computers in a certain OU

Can an OU be added to the Search Properties to return the Logon Activity against all of the Computers in that OU?

Creada el: lunes, 22 de agosto de 2022
4361606 - Database custom index

Creada el: lunes, 22 de agosto de 2022
4367257 - Enhancement request: PowerShell command to edit GPO Protection templates

Enhancement Request to be able to edit GPO Protection Templates using PowerShell Commands.

Creada el: martes, 23 de agosto de 2022
4362764 - Change Auditor Coordinator (ChangeAuditor.Service) engine uses all available memory, locks server, or is stuck in initializing

When starting the Change Auditor Coordinator (ChangeAuditor.Service) engine it uses all available memory, appears to lock the  server or is stuck...

Creada el: lunes, 22 de agosto de 2022
4362750 - Stop alerting when updating or patching and agents are disconnecting and connecting?.

When a customer patches their servers or need to perform Maintenance is there a way to stop alerting and stop the emails that are sent during that...

Creada el: lunes, 22 de agosto de 2022
4362735 - How to find Change Auditor license number

How to locate and view the product license number in Change Auditor.

Creada el: lunes, 22 de agosto de 2022
4362564 - Change Auditor agent start-up on Exchange causes Outlook connections to be disconnected

During start-up of the Change Auditor agent on Exchange server, Outlook connections are reset.

Creada el: lunes, 22 de agosto de 2022
4362568 - Unable to locate user objects when using AD sub-system "Add With Events" option under the WHAT tab

When creating a search and using "Add With Events | Subsystem ", many objects that have events in the database do not appear even though the events...

Creada el: lunes, 22 de agosto de 2022
4362470 - Last file write changed event is not audited on File Server

When Microsoft Office creates, deletes, or renames a Word document or Excel spreadsheet file,  events are being audited, however when the same file...

Creada el: lunes, 22 de agosto de 2022
4361632 - Cannot add SYSVOL folder to the File System Auditing template

When trying to add the SYSVOL path as %SystemRoot%\windows\SYSVOL, the add button is not active while creating the file template.

Creada el: lunes, 22 de agosto de 2022
4361607 - Using the "Enterprise" scope in GPO protection templates does not properly protect newly created GPO objects

Protecting all GPO's in the Enterprise using the "Enterprise" selection works as expected for a GPO that exists when you create the policy. However...

Creada el: lunes, 22 de agosto de 2022
4359957 - Database belongs to a different installation name

Creada el: lunes, 22 de agosto de 2022
4361619 - Arcsight CEF format, Can we make custom changes to the CEF file sent by the ChangeAuditor to Arcsight?

Can we make custom changes to the CEF file sent by the ChangeAuditor to Arcsight?

Creada el: lunes, 22 de agosto de 2022
4360704 - Error message: Warning : no public key found matching the Coordinator key. Unable to decrypt data.

You see the message "Warning : no public key found matching the Coordinator key. Unable to decrypt data." in CA coordinator logs window.

Creada el: lunes, 22 de agosto de 2022
4360008 - Change Auditor Protection Templates not protecting some AD OU's or AD Groups.

Change Auditor Protection Templates are not protecting the items they are set up to protect. Re-creating a template protected for a short time...

Creada el: lunes, 22 de agosto de 2022
4359997 - How to perform File System Auditing against Netlogon?

How do you configure a File System Auditing Template to Audit changes made to the Netlogon contents?

Creada el: lunes, 22 de agosto de 2022
4359983 - Does Change Auditor support the Windows Defender Credential Guard?

Does Change Auditor support the Windows Defender Credential Guard which is available starting in Windows 2016 Server and Windows 10?

Creada el: lunes, 22 de agosto de 2022
4361548 - Protected Group Policy replication issues with ChangeAuditor Group Policy Protection enabled

In some circumstances, a Group Policy Object (GPO) may fail to replicate to all Domain Controllers if Change Auditor Group Policy Protection is...

Creada el: lunes, 22 de agosto de 2022
4359828 - Coordinator service fails to start

Creada el: lunes, 22 de agosto de 2022
4359832 - Exclude SQL Roles by Excluded accounts

An administrator does not want to record events by specific SQL Roles but is unable to create a User Exclusion for SQL Roles.

Creada el: lunes, 22 de agosto de 2022
4362455 - File Open event is not audited when the file is 0kb

File Monitoring does not audit 'File Open' event on 0kb files.

Creada el: lunes, 22 de agosto de 2022
4361562 - Who field shows computer name

Who field shows computer name

Creada el: lunes, 22 de agosto de 2022
4361531 - Allow auditing of owner events for AD groups and OUs

By default, when adding mailboxes for auditing, 'Owner' option is disabled except at the user level.

Creada el: lunes, 22 de agosto de 2022
4365556 - Can change auditor use an external certificate or is it restricted to using the self-signed certificate?

Change Auditor appears to be using is self signed certificate for communication and subscriptions.  Is it possible to assign a 3rd party...

Creada el: martes, 23 de agosto de 2022
4358804 - Add ability for CA Admin to run a custom pre/post deployment script for Agent deployments from the Win32 client

Change Auditor Administrator should have an option to run a custom script as a pre- or post-deployment activity for Change Auditor Agent...

Creada el: lunes, 22 de agosto de 2022
4360689 - Decommissioned Domain Controller still shows in Statistics as uninstalled

Decommissioned Domain Controller still shows in Statistics as uninstalled

Creada el: lunes, 22 de agosto de 2022
4367256 - Unable to add an Active Directory Group Managed Service Account (GMSA) to purge job

When trying to configure a purge job to remove all events from a Group Managed Service Account, we are unable to select these type of object class...

Creada el: martes, 23 de agosto de 2022
4361643 - How to search a specific DNS record added

When a specific DNS record is created, We try to search and filter for a specific time frame all the events "DNS A record added", but in the event...

Creada el: lunes, 22 de agosto de 2022
4361560 - SCOM 2012 Management Pack

Want a SCOM management pack so that can use the newest version of SCOM 2012 without a backwards compatibility pack

Creada el: lunes, 22 de agosto de 2022
4361612 - Assigning a user to a Role through Privileged Identity Management (PIM) doesn't return who did the change but rather 'MS-PIM'

When running a CA search for changes to AAD Global Administrator (example) the 'Who' field is 'MS-PIM' and not the user who made the change.

Creada el: lunes, 22 de agosto de 2022
4362471 - Getting event ID 1015 in app event log (ARCHIVE)

Creada el: lunes, 22 de agosto de 2022
4362762 - How does Change Auditor calculate the number of mail-enabled users

How does Change Auditor calculate the number of mail-enabled users?

Creada el: lunes, 22 de agosto de 2022
4361577 - Can an alert be created if a user from one group is added as a member to another group?

Is there a way to monitor/alert on AD group membership in the following scenario: AD user is currently a member of Group A. If Group A member is...

Creada el: lunes, 22 de agosto de 2022
4361556 - Members of the Change Auditor Operators group do not have the report tab in the Web Client

User who are members of the Change Auditor Operators group do not see the Report tab in the Web Client when running a search.

Creada el: lunes, 22 de agosto de 2022
4362738 - Is it possible to collect Windows Time Service (W32Time) Events and error message via Change Auditor

Change Auditor do not collect information from W32Time (Windows Time Service)  Events as Change Auditor purpose is not to collect error...

Creada el: lunes, 22 de agosto de 2022
4361547 - Is there a function to import the Exchange user's Mailbox from a csv file into the Exchange Audit Template?

Is there a Change Auditor function to import Exchange users Mailboxes (for monitoring) from a csv file into the Exchange Audit Template with an...

Creada el: lunes, 22 de agosto de 2022
4361541 - How to configure an alert for when a computer is added to the Computers container

How to configure CA to send an email alert when computers are added to the Computers container in Active Directory

Creada el: lunes, 22 de agosto de 2022
4361535 - Change Auditor Agent loads the File System Driver by default, even if no File System events are being gathered

In newer versions of Change Auditor, the Windows File Server auditing component (FSDriver) is loaded into memory by default.  This happens even if...

Creada el: lunes, 22 de agosto de 2022
4361990 - Recreating the SCP (Service Connection Point) for Change Auditor

No SCP can be found. Recreating the SCP (Service Connection Point) is necessary.

Creada el: lunes, 22 de agosto de 2022
4345265 - Auditing multiple CIFS servers residing on the same data mover

Configuring Change Auditor template for auditing changes to multiple CIFS servers is not stright-forward. Complexity can be increased if VDMs are...

Creada el: lunes, 22 de agosto de 2022
4361639 - Topology server removed events.

Getting a lot of "Topology server removed" events. The FacilityName is Fault Tolerance. No information on who has removed the server or added it in...

Creada el: lunes, 22 de agosto de 2022
4361622 - How to monitor User ObjectSid changes

How to monitor User ObjectSid changes

Creada el: lunes, 22 de agosto de 2022
4361636 - Protect Single Attribute On All Users at OU or domain level

Is it possible to protect one attribute from being edited on all users? All users have this attribute, and it should be impossible for anyone to...

Creada el: lunes, 22 de agosto de 2022
4346673 - How to Purge Data from the Change Auditor database

Administrators can use the Purge Jobs feature in the Change Auditor 6.5, and later, Client to schedule Purge jobs to remove events from the...

Creada el: lunes, 22 de agosto de 2022
4362481 - How to view the events waiting to be sent the by Change Auditor Agents using the Change Auditor Client

Change Auditor Agents can have events waiting to be sent to the Change Auditor Coordinator due to a variety of issues including throughput or...

Creada el: lunes, 22 de agosto de 2022
4351172 - Detailed instructions on how to manually create an Azure Web App for Change Auditor

What are the detailed instructions to manually create a web application in our Azure tenant that we can then leverage within the CA Azure template...

Creada el: lunes, 22 de agosto de 2022
4361623 - Email / Exchange events not recorded with AD license.

Will the normal AD license capture email address changes? 

Creada el: lunes, 22 de agosto de 2022
4361557 - Does Change Auditor support TDE encryption of the SQL database

Does Change Auditor support the TDE encryption of the SQL database?

Creada el: lunes, 22 de agosto de 2022
4361645 - Unable to authenticate on email gateway due to email address too long

Our sender email address for authentication is more than 64 characters and is truncated to 64 characters.

Creada el: lunes, 22 de agosto de 2022
4351140 - Does Change Auditor support Group Managed Service Accounts?

Does Change Auditor support using a gMSA for the Coordinator Database Connection, Agent Deployment or for the Shared Folder account?

Creada el: lunes, 22 de agosto de 2022
4345351 - Can I have the username in the Alert Subject when a member of group change is made?

When Alerting on "Member added to group" and "Member removed from group" events, There doesn't seem to be a way to display the username in the...

Creada el: lunes, 22 de agosto de 2022
4341106 - Initiator field is blank for events with a source of Change Auditor

When an active directory group's membership is modified, the change auditor alert's initiator filed is blank if the source if Change Auditor.

Creada el: lunes, 22 de agosto de 2022
4348982 - Does Change Auditor 7.x coordinator support TLS 1.2 for SQL communication?

Does Change Auditor 7.x coordinator support TLS 1.2 for SQL communication?

Creada el: lunes, 22 de agosto de 2022
4316387 - Como Actualizar Manualmente la Base de datos de Change Auditor Utilizando Comandos de SQL

Cuando a través  del cliente no se puede actualizar una base de datos antigua y archivada. El intento de actualizar el esquema de la base de...

Creada el: miércoles, 24 de agosto de 2022
4316387 - Como Actualizar Manualmente la Base de datos de Change Auditor Utilizando Comandos de SQL

Cuando a través  del cliente no se puede actualizar una base de datos antigua y archivada. El intento de actualizar el esquema de la base de...

Creada el: miércoles, 24 de agosto de 2022
4275614 - Como verificar el estado de salud Change Auditor?

Buscando una forma de monitorear el estado del servicio de CA

Creada el: miércoles, 24 de agosto de 2022
4275614 - Como verificar el estado de salud Change Auditor?

Buscando una forma de monitorear el estado del servicio de CA

Creada el: miércoles, 24 de agosto de 2022
4237966 - Firewall 経由で ChangeAuditor Agent を使用するには(63693)

ChangeAuditor Agent が使用するポートについて説明します。

Creada el: miércoles, 24 de agosto de 2022
4214524 - ChangeAuditor のログについて(122646)

ChangeAuditor のトラブルシュートに使用するログファイルは、 "NPTLOG" というトレースログタイプのファイルとなります。このファイルは、 ChangeAuditor Client と共にインストールされるビューアーにて開くことができます。 各...

Creada el: miércoles, 24 de agosto de 2022
Revisado el
4294788 - Custom file system monitoring not happening on server

Custom file system monitoring not happening on specific server. No events captured. Getting errors. Attached error screenshot of agent event log

Revisado el: miércoles, 24 de agosto de 2022
4311872 - custom AD schema attributes are not visible on change auditor

New custom AD schema attributes are not visible on change auditor. We don't see any change performed on these new attributes, how can we add/update...

Revisado el: miércoles, 24 de agosto de 2022
4294969 - CSV to import objection via the protection wizard

Revisado el: miércoles, 24 de agosto de 2022
4269690 - Cross Reference Events in the InTrust for AD log with the Change Auditor database

Is it possible to Query a SQL Table in the Change Auditor Database for the events that are written to the InTrust for AD log on Domain Controllers?

Revisado el: miércoles, 24 de agosto de 2022
4227950 - Creation of Azure Auditing template fails without an Office 365 Exchange online license present in the tenant

The following error is displayed in the CA Client when attempting to create an Azure Auditing template without an Office 365 Exchange online...

Revisado el: miércoles, 24 de agosto de 2022
4255701 - Creating new agent configuration gives error "External component has thrown an exception"

Creating new agent configuration gives error "External component has thrown an exception" in the ChangeAuditor Client

Revisado el: miércoles, 24 de agosto de 2022
4319988 - Creating Hyperlinks to a file from Word, Excel or Outlook generates a folder open for all sub folder in the selected file path

When creating a Hyperlinks to a file from within Microsoft Outlook, Word, or Excel and a user browses to the path of the file to link, and a...

Revisado el: miércoles, 24 de agosto de 2022
4224248 - Creating an O365 auditing template fails with the warning, "An error has occurred in the script on this page"

When creating an O365 auditing template, a pop-up warning box is displayed after clicking the Finish button with the following text: An error...

Revisado el: miércoles, 24 de agosto de 2022
4300810 - Creating a Search for Office 365 SharePoint with Change Auditor.

Looking to be able to create a search for files that have changed with an Azure Information Protection Label. Is there a way to do this in Quest...

Revisado el: miércoles, 24 de agosto de 2022
4220725 - Creating a ChangeAuditor for SharePoint template fails when the account specified has a long password

When creating a SharePoint auditing template in ChangeAuditor Client, the SharePoint Topology scan fails with the error: "Failed to scan...

Revisado el: miércoles, 24 de agosto de 2022
4349010 - Create Rule to Monitor All Service Account acitvities

How can I import a CSV of accounts to use in a search/alert

Revisado el: miércoles, 24 de agosto de 2022
4257259 - Create alert to identify people that check off password never expires

Create alert to identify people that check off password never expires

Revisado el: miércoles, 24 de agosto de 2022
4299743 - Could not connect to SQL server

When deploying a Coordinator or updating the SQL Database connection account , the following error is displayed: Could not connect to the...

Revisado el: miércoles, 24 de agosto de 2022
4300143 - Coordinator Stops after Upgrade from CA 6.9 to 7.1

Coordinator stops after upgrading from CA 6.9.5 to CA 7.1 coordinator logs found error " Method not found " Swashbuckle  application Swagger Enable...

Revisado el: miércoles, 24 de agosto de 2022
4288750 - Coordinator will not start due to an SSL communication issue between the coordinator and the SQL server

Change Auditor Coordinator service is not starting on on Change Auditor Host server. The Coordinator log records the following INFO line...

Revisado el: miércoles, 24 de agosto de 2022
4236716 - Coordinator will not start with error, "an exception occurred in the OnAfterInstall event handler"

Consider the following scenario... 1. Coordinator installer completes but the coordinator service fails to start. 2. The Application log...

Revisado el: miércoles, 24 de agosto de 2022
4230710 - Coordinator will not start after upgrade - Logs reveal database is being upgraded.

After upgrading the Change Auditor coordinator, the logs reveal that the database is currently being upgraded.  Coordinator service stops and...

Revisado el: miércoles, 24 de agosto de 2022
4227792 - Coordinator will not start. SQL error, "The account password has expired" or "The account is locked"

Coordinator will not start. SQL error, "The account password has expired" or "The account is locked"

Revisado el: miércoles, 24 de agosto de 2022
4344583 - Coordinator service not started after reboot

After any reboot, the Coordinator Status in the bottom left icon tray shows red (or disabled). Manually starting it works, but it needs to be...

Revisado el: miércoles, 24 de agosto de 2022
4276160 - Coordinator stopped. "SQL error(121)" found in the ChangeAuditor.Service.exe.nptlog log file.

The coordinator has stopped and agents in a second domain are inactive.

Revisado el: miércoles, 24 de agosto de 2022
4273800 - Coordinator Start and then Stops with 'System.Runtime.Serialization.EnumMemberAttribute' from assembly error

The Change Auditor Coordinator Starts and then stops within seconds. The Change Auditor coordinator log records the following error: WARN - A...

Revisado el: miércoles, 24 de agosto de 2022
4243256 - Coordinator service fails to start with the error: "The specified directory service attribute or value does not exist"

The Coordinator service fails to start. Looking at the Coordinator log, the following error is logged: "The specified directory service attribute...

Revisado el: miércoles, 24 de agosto de 2022
4236461 - Coordinator service may stop following SQL server restart

Consider the following scenario: 1. Coordinator for is attached to a ChangeAuditor database on an SQL server. 2. SQL server is rebooted, ie...

Revisado el: miércoles, 24 de agosto de 2022
4231509 - Coordinator Service fails to start - Could not load file or assembly System.Core

The Coordinator service fails to start with the error: 2015-10-20 15:12:55.906 [9][ERROR][ChangeAuditor.Service.Service...

Revisado el: miércoles, 24 de agosto de 2022
4228019 - Coordinator may crash during start-up if SQL connection is interrupted

Coordinator may crash if SQL becomes inaccessible during start-up.  There is an exception thrown when a SQL query is executed and it's not...

Revisado el: miércoles, 24 de agosto de 2022
4227849 - Coordinator service fails to start due to duplicate ports detected

Under rare situation, the coordinator service fails to start due to duplicate ports detected warning. [WARN][ChangeAuditor.Service.Service...

Revisado el: miércoles, 24 de agosto de 2022
4209323 - Coordinator stopping SQL error(18487): Login failed for user

The Change Auditor Client cannot connect, and the ChangeAuditor Coordinator service stops after started. the Coordinator log shows the message...

Revisado el: miércoles, 24 de agosto de 2022
4346877 - Coordinator fails to start after upgrade

The ChangeAuditor coordinator fails to start after an upgrade with the following error message in the coordinator logs: Error message: Method...

Revisado el: miércoles, 24 de agosto de 2022
4330392 - Coordinator Install Fails with "The computer is not is a site"

Revisado el: miércoles, 24 de agosto de 2022
4306043 - Coordinator hung in initializing state with SQL error: TIMEOUT on SELECT TOP 1 _id FROM dbo.AuditEvent ORDER BY _id DESC.

The Coordinator is stuck in the initializing state with the following error repeatably being written to the Coordinator log [INFO][Quest.Data...

Revisado el: miércoles, 24 de agosto de 2022
4233722 - Coordinator install error, "This installation must be run as administrator"

Running the ChangeAuditor Coordinator msi installer package results in the error: "This installation must be run as administrator"

Revisado el: miércoles, 24 de agosto de 2022
4233557 - Coordinator installer error ," Cannot Execute Command the function prompted the user for addit

During installation of Change Auditor the following error is experienced: "Cannot Execute Command the function prompted the user for additional...

Revisado el: miércoles, 24 de agosto de 2022
4233518 - Coordinator installer cannot create groups.

Coordinator installer cannot create groups, with the following error returned "Cannot create group account (Domain)"

Revisado el: miércoles, 24 de agosto de 2022
4228164 - Coordinator fails to start. Unknown error (0x80005000).

Revisado el: miércoles, 24 de agosto de 2022
4234851 - Coordinator error: "max pool size was reached"

The Change Auditor Coordinator was no longer writing events to SQL and the Coordinator log showed an error that the Max Pool size was reached

Revisado el: miércoles, 24 de agosto de 2022
4234530 - Coordinator database upgrade fails with error, "The label token has already been declared"

Coordinator will not upgrade the Change Auditor Database with the following error around 30% mark as found in the logs: Error incorrect...

Revisado el: miércoles, 24 de agosto de 2022
4233665 - Coordinator fails to start after service account password changes

After changing the password via the "Coordinator Database Configurator" option on the Coordinator status-tray icon the Coordinator fails to start...

Revisado el: miércoles, 24 de agosto de 2022
4230924 - Coordinator cannot connect to ChangeAuditor database with error, "the execute permission was denied on the object 'np_systempropertyStrGet'"

When attempting to update the Coordinator database configuration via the ConfigureDatabase.exe application the connection attempt fails and the...

Revisado el: miércoles, 24 de agosto de 2022
4209320 - Coodinator Server Move

To move the ChangeAuditor Coordinator / Server to another Windows Server: In this scenario we will be installing a second ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4354032 - Conversion of Distribution Group to Security Group via Outlook shows as Exchange 2003 Server for

Conversion of Distribution Group to Security Group via Outlook shows as Exchange 2003 Server for both 'Who' and 'Where'. Some customers might...

Revisado el: miércoles, 24 de agosto de 2022
4344532 - Continuous SQL connection warning is shown on the coordinator logs. ERROR:Attempting to reconnect to the database

A continuous warning is shown on the coordinator logs : Attempting to reconnect to the database (1) ID: 15613 Time: 6/28/18 09:40:03.874 Level...

Revisado el: miércoles, 24 de agosto de 2022
4234641 - Connection error: The Change Auditor database has a version that is not supported by IT Security Search

After installing IT Security Search and testing the Change Auditor connector connection, the following error is returned: "Connection error: The...

Revisado el: miércoles, 24 de agosto de 2022
4209333 - Connecting to same CA database from another version

Is it possible to connect a newer Change Auditor Coordinator (e.g. 7.0.1) to a CA database created by another CA Coordinator in place (e.g. 7.0.4).

Revisado el: miércoles, 24 de agosto de 2022
4307130 - Connect CAClient : No suitable coordinators were found.

Revisado el: miércoles, 24 de agosto de 2022
4288436 - Conflicting data found. Maximum Coordinator Instance ID is 0x000000x, greater than the one found in system table: 0x00000001

When attempting to merge two archive databases using the Data Migration Tool, the following error is received (x  represents a numeric value...

Revisado el: miércoles, 24 de agosto de 2022
4306618 - Configuring/installing change auditor for EMC Isilon auditing

Need to configure Change Auditor to audit EMC Isilon events.

Revisado el: miércoles, 24 de agosto de 2022
4344600 - Configuring SMTP authentication in Change Auditor

My email host requires authentication to be able to send emails, how can I configure the Change Auditor coordinator to use an account to...

Revisado el: miércoles, 24 de agosto de 2022
4224497 - Configuring Auto Deployment in a Multi-Forest Configuration

An administrator needs to know how to configure permission for Auto Deployment in a Multi-Forest (multiple Forrest) Configuration.

Revisado el: miércoles, 24 de agosto de 2022
4273887 - Configure Change Auditor with System Center Operations Manager 2012 (R2)

How to configure Change Auditor with System Center Operations Manager 2012 (R2) in order to monitor Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4227824 - Configure alerting to evaluate less often than every 1 minute

In Change Auditor 5.x it was possible to adjust the evaluation frequency setting on per alert bases. This is not possible on Change Auditor 6.x...

Revisado el: miércoles, 24 de agosto de 2022
4233761 - Configuration vCenter auditing error, could not contact servername to verify password. Password will not be saved

While configuring vCenter server, the Change Auditor Client produces message even though configuration appears valid: "Could Not Contact...

Revisado el: miércoles, 24 de agosto de 2022
4288365 - Configuration Export fails with error "Instance is Read-Only"

When attempting to Extract Change Auditor Configuration , the following error is displayed before the Client crashes: Instance is read-only...

Revisado el: miércoles, 24 de agosto de 2022
4288268 - Configuration Export fails with error "Object reference not set to an instance of an object'

When attempting to Export the Change Auditor  Configuration , the XML file is empty and the Client crashes with the following error...

Revisado el: miércoles, 24 de agosto de 2022
4254863 - Computer object newly added to Active Directory does not appear on the Change Auditor Deployment tab

Computer object that was recently added to Active Directory does not appear on the Change Auditor Deployment tab and, therefore, a Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4223328 - Command Line Installer not installing into the specified path

When attempting to perform a command line or silent install of the ChangeAuditor Agent 6 using the msiexec command, and using the INSTALLDIR switch...

Revisado el: miércoles, 24 de agosto de 2022
4306517 - Collation switch performance leads to database upgrade failure

After a database migration to different server, the following error message is displayed in logs Cannot resolve collation conflict between...

Revisado el: miércoles, 24 de agosto de 2022
4240796 - Client is prompting for repository credentials. ERROR: " The specified user does not exist."

Client is prompting for repository credentials.. Error in log "Failure retrieving client privileges. NetProLib::System::GetUserNameW - The...

Revisado el: miércoles, 24 de agosto de 2022
4351133 - Client crashes whenever you use the "Add with events | Active Directory" option under the What tab

Client crashes whenever you use the "Add with events | Active Directory" option under the What tab. 

Revisado el: miércoles, 24 de agosto de 2022
4300381 - Client fails to connect to Coordinator

After upgrade to 7.0.2 : Coordinator service is running and events are coming in. Client fails to connect to Coordinator with error...

Revisado el: miércoles, 24 de agosto de 2022
4255379 - Client fails to connect after minutes with a timeout error: "This request operation sent to net.tcp://<CoordinatorFQDN>:<ClientPort>/ChangeAuditor/Authentication

When trying to connect the Change Auditor Client to the Coordinator, it takes 30 minutes and then an error similar to the following is shown...

Revisado el: miércoles, 24 de agosto de 2022
4230841 - Client error, "Database access error, incorrect product version"

After performing an upgrade, the following database access error when connecting to the Change Auditor client. The error states: "Database access...

Revisado el: miércoles, 24 de agosto de 2022
4294176 - Client Connection Profile opens client using a different user account from the logon user

When opening the Client, the option to connect with a connection profile is presented, and when profile connects to the Coordinator, the user...

Revisado el: miércoles, 24 de agosto de 2022
4264832 - Chinese, Arabic & other characters will not display correctly in report

When generate the report (in PDF and TXT format) the Chinese , Arabic and other none standard characters will not displayed correctly.

Revisado el: miércoles, 24 de agosto de 2022
4306786 - Changing protected groups is not taking effect.

Have a group protected in Change Auditor and when I disable it is not taking effect.

Revisado el: miércoles, 24 de agosto de 2022
4319621 - Changes to the domain root object are not shown when querying all actions of a user.

If a user removes an ACE from the domain root object and then search Change Auditor for all actions of the user who committed the change, no data...

Revisado el: miércoles, 24 de agosto de 2022
4225127 - Changes to the Application User Interface section of the Administration tab do not produce events.

Is possible to audit changes to the Application User Interface under Administration Tasks.

Revisado el: miércoles, 24 de agosto de 2022
4316222 - Changes to risk event properties and identity protection APIs in Microsoft Graph

Microsoft is making changes to riskDetection and riskyUsers API properties in Microsoft Graph,  which are used by Change Auditor to audit Azure...

Revisado el: miércoles, 24 de agosto de 2022
4240881 - Changes to mailbox permissions are logged with Computer$ as the WHO

When modifying permissions on a mailbox that has been created but not logged into, or has not received a message, the WHO of the event shows as...

Revisado el: miércoles, 24 de agosto de 2022
4243152 - Changes to ARS virtual attributes do not get audited by Change Auditor

Modifying an attribute in the properties of an object, such as 'Resource URL:' in ARS does not generate an audited event in Change Auditor, whereas...

Revisado el: miércoles, 24 de agosto de 2022
4237846 - Changes made in Application User Interface are not shared between coordinators

Changes made in "Application User Interface" are not currently shared amongst coordinators in an installation. In this configuration, customization...

Revisado el: miércoles, 24 de agosto de 2022
4233715 - Changes made to a report design are reset if the report is enabled and saved or if closed, the design is blank upon reopening

When trying to edit any field of a report with a previously customized layout, all changes (header bands or column sizes for example) made in the...

Revisado el: miércoles, 24 de agosto de 2022
4294420 - ChangeAuditor.Exchange.PowerShellMonitor may fail to load due to locked log4net

Several commands in EMS will not take effect, despite no error being returned. On the mailbox server, I’m seeing Application event log errors...

Revisado el: miércoles, 24 de agosto de 2022
4280436 - ChangeAuditor web client is loading as a blank page

Revisado el: miércoles, 24 de agosto de 2022
4316359 - ChangeAuditor Purge Job fails with the error "Cannot find table 0"

After a scheduled Purge Job runs, the error "Cannot find table 0" is displayed in the Purge Job Message Field and no events were Purged. Errors...

Revisado el: miércoles, 24 de agosto de 2022
4316300 - ChangeAuditor Search based on an Active Directory OU returns results from other similar OUs

When performing a ChangeAuditor Search based on an Active Directory OU on the "What" tab, results are returned for other Active Direcroty OUs that...

Revisado el: miércoles, 24 de agosto de 2022
4282476 - ChangeAuditor SCP and Coordinator Port Information

What are the ports for in the Coordinator Configuration tool and how do they relate to the information in the SCP

Revisado el: miércoles, 24 de agosto de 2022
4276077 - ChangeAuditor is not auditing User changes.

Revisado el: miércoles, 24 de agosto de 2022
4269410 - ChangeAuditor should show a failed event when a process tries to delete a non leaf user object per ldap and fails

ChangeAuditor should show a failed event when a process tries to delete a non leaf user object per ldap and fails Example 1 method to reproduce...

Revisado el: miércoles, 24 de agosto de 2022
4233697 - ChangeAuditor requires dedicated SQL server instance

Revisado el: miércoles, 24 de agosto de 2022
4354168 - ChangeAuditor Group Membership changes may not show search results if the correct Event Classe

ChangeAuditor Group Membership changes may not show search results if the correct Event Classes are not used in searches.

Revisado el: miércoles, 24 de agosto de 2022
4306672 - ChangeAuditor Error deploying Coordinator.

The specified name is not a forest, Active Directory domain controller, ADAM instance, or ADAM configuration set

Revisado el: miércoles, 24 de agosto de 2022
4273996 - ChangeAuditor for EMC fills up disk space on EMC control Station

When configuring the EMC control station (VNX) to work with Change Auditor for EMC, its noted that the EMC control Station local disks are filling...

Revisado el: miércoles, 24 de agosto de 2022
4354926 - ChangeAuditor Email Alert Subject Line does not allow all of the same variables that are allowed

ChangeAuditor email alert subject line does not allow all of the same variables that are allowed in the email alert body.

Revisado el: miércoles, 24 de agosto de 2022
4316371 - ChangeAuditor database doubles in size after upgrade from ChangeAuditor 5.x to ChangeAuditor 6.x

The ChangeAuditor database can double in size when events in the ChangeAuditor database are migrated from ChangeAuditor 5.x to ChangeAuditor 6.x.

Revisado el: miércoles, 24 de agosto de 2022
4300244 - ChangeAuditor driver library fails and may cause lsass.exe to crash and reboot the Domain Controller

When the Change Auditor driver library 'CAADHook.dll' is unloaded during a restart of the Change Auditor Agent on a Domain Controller, lsass.exe...

Revisado el: miércoles, 24 de agosto de 2022
4278241 - ChangeAuditor Coordinator.Service does not start - a local error occurred

When Reviewing the Coordinator Log you see the following error Message: Database initialization not successful on ChangeAuditor.  

Revisado el: miércoles, 24 de agosto de 2022
4255545 - ChangeAuditor database change does not show in RMAD RMAD/FE

Using the Recovery Manager for Active Directory console with Change Auditor, there is an option to use the ChangeAuditor database for reporting...

Revisado el: miércoles, 24 de agosto de 2022
4255545 - ChangeAuditor database change does not show in RMAD RMAD/FE

Using the Recovery Manager for Active Directory console with Change Auditor, there is an option to use the ChangeAuditor database for reporting...

Revisado el: miércoles, 24 de agosto de 2022
4250412 - ChangeAuditor does not detect File System events on a NAS drive on a Windows File Server

ChangeAuditor does not detect File System events on the NAS drive of a Windows File Server but will detect events on the local disk.

Revisado el: miércoles, 24 de agosto de 2022
4250333 - ChangeAuditor Coordinator unable to connect to the ChangeAuditor agents

ChangeAuditor Coordinator is unable to connect to the ChangeAuditor agents and records error similar to the folowing in the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4353193 - ChangeAuditor Agents will not install on computers that have ScriptLogic's Active Administrator s

ChangeAuditor Agents will not install on computers that have ScriptLogic's Active Administrator software installed on them. This issue is already...

Revisado el: miércoles, 24 de agosto de 2022
4306216 - ChangeAuditor Agents are connecting and disconnecting every few seconds or not connecting to the coordinator at all.

A group of ChangeAuditor Agents are constantly connecting and disconnecting at a high frequency from the Coordinator. The affected agents log the...

Revisado el: miércoles, 24 de agosto de 2022
4282240 - ChangeAuditor agent Starts then Stops and creates a Mdmp file for npsrvhost.exe.*****.mdmp

ChangeAuditor agent Starts then Stops and creates a Mdmp file for npsrvhost.exe.*******.mdmp on the Agent server. Reviewing the...

Revisado el: miércoles, 24 de agosto de 2022
4275962 - ChangeAuditor agent service will not start after install

The ChangeAuditor agent service will not start after installing the ChangeAuditor agent on a server. The following is logged in the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4270853 - ChangeAuditor Agents are inactive after Windows patching and subsequent reboots.

Agents show as "Inactive" on the Agent Statistics tab of the ChangeAuditor Client. The agent logs show issues connecting to the coordinator.

Revisado el: miércoles, 24 de agosto de 2022
4344473 - ChangeAuditor Agent MSI switches for manual installation

Revisado el: miércoles, 24 de agosto de 2022
4316014 - ChangeAuditor Agent leaks memory on Domain Controllers when 'AD Queries' module is licensed

Upon installing ChangeAuditor Agent 6.0.158 (or below) on a Domain Controller the Agent process ('NPSrvHost.exe') steadily begins to consume...

Revisado el: miércoles, 24 de agosto de 2022
4244280 - ChangeAuditor agent log from a Domain Controller does not load when using the View Agent Log option in the ChangeAuditor Client

When attempting to view the ChangeAuditor agent log from a domain controller using the View Agent Log option in the ChangeAuditor Client, the...

Revisado el: miércoles, 24 de agosto de 2022
4233780 - ChangeAuditor Agent deployment fails with RPC error 1727

Revisado el: miércoles, 24 de agosto de 2022
4233567 - ChangeAuditor 6.x Agent will not authenticate on Workgroup machine

During ChangeAuditor Agent installation the following message may be experienced while running the installer: "Cannot create group account...

Revisado el: miércoles, 24 de agosto de 2022
4220839 - ChangeAuditor 6.x Agents fail to authenticate with the ChangeAuditor Coordinator

The ChangeAuditor Agents fail to authenticate with the ChangeAuditor Coordinator.  The following warnings are printed in the Agent log...

Revisado el: miércoles, 24 de agosto de 2022
4316228 - ChangeAuditor 5.x and ChangeAuditor 6.x compatibility in a mixed environment

During the process of upgrading the ChangeAuditor environment from ChangeAuditor 5.x to ChangeAuditor 6.x, administrators may have a period of time...

Revisado el: miércoles, 24 de agosto de 2022
4269428 - ChangeAuditor 6.7 EMC Auditing is Unable to collect EMC events.

Having correctly created and configured a EMC template and deployed this to an agent, EMC events are still failing to be captured Reviewing the...

Revisado el: miércoles, 24 de agosto de 2022
4231273 - ChangeAuditor 'NPSrvHost.exe' process consumes all the memory on the DC under load

ChangeAuditor 'NPSrvHost.exe' process consumes all the memory on the DC under load from large volume of group membership changes.

Revisado el: miércoles, 24 de agosto de 2022
4233594 - Change published srs searches to use a custom logo

Revisado el: miércoles, 24 de agosto de 2022
4254964 - Change in lockouttime attribute, when an AD LDS user account is locked, does not create an event

Change in lockouttime attribute, when account is locked in Active Directory Lightweight Directory Service (AD LDS) server, does not trigger a...

Revisado el: miércoles, 24 de agosto de 2022
4299757 - Change Auditor/Active Roles integration scripts with Splunk

We have Active Roles Server 7.4.4 and Change Auditor 7.1.1 installed. We have "Change Auditor/Active Roles integration scripts" deployed. These...

Revisado el: miércoles, 24 de agosto de 2022
4257796 - Change Auditor will not audit AD events with following error in CAADHook log, Failed to hook DirAddEntry

Change Auditor agent will not collect AD events with the error below if installed on the same machine as: -NetVision Agent -Visual Click

Revisado el: miércoles, 24 de agosto de 2022
4351152 - Change Auditor uses depricated identityRiskEvents API for Azure/O365.

Microsoft has deprecated the use of identityRiskEvents API in January of 2020 • Developer blog post on the deprecation: https://developer...

Revisado el: miércoles, 24 de agosto de 2022
4315678 - Change Auditor WebClient shows invalid date in the When field on non-US English systems

On non-US English Microsoft Windows systems the WebClient displays 'Invalid Date' in the event's When field. In some situations you may also see a...

Revisado el: miércoles, 24 de agosto de 2022
4315535 - Change Auditor Web Client will not expand all grouped results of an AD Queries search

After running any the Built-In AD Query searches, then dragging any column header to group the results, attempting to click on the arrow next to...

Revisado el: miércoles, 24 de agosto de 2022
4289225 - Change Auditor time received for EMC events is 4 hours after event occurs

While testing Change Auditor’s file auditing feature, I’ve noticed extreme lag time between the time I make a file change, and the time it shows up...

Revisado el: miércoles, 24 de agosto de 2022
4257246 - Change Auditor Upgrade and SQL Migration

Title: Change Auditor Upgrade to latest version and SQL migration 

Revisado el: miércoles, 24 de agosto de 2022
4255490 - Change Auditor Web Client: Failed to get the service address for the coordinator or Unable to Connect

Trying to logon to the Web Client one of the following errors may occur "Failed to get the service address for the coordinator" Or "Unable to...

Revisado el: miércoles, 24 de agosto de 2022
4254801 - Change Auditor Web Client displays "There was an error connecting to the Coordinator service"

Change Auditor Web Client displays "There was an error connecting to the Coordinator service. Check the App_Data/ChangeAuditorWeb.nptlog for errors...

Revisado el: miércoles, 24 de agosto de 2022
4253651 - Change Auditor support for SHA-2

Does Change Auditor support a Windows environment using Secure Hash Algorithm type 2 (SHA-2)?

Revisado el: miércoles, 24 de agosto de 2022
4244622 - Change Auditor upgrade to 7.1

Change Auditor upgrade to 7.1

Revisado el: miércoles, 24 de agosto de 2022
4233630 - Change Auditor Web Client randomly returns to logon screen

While using the Web Client clicking on another page may randomly lead to a logout and the user is returned to the logon screen. For example...

Revisado el: miércoles, 24 de agosto de 2022
4351350 - Change Auditor support for Exchange 2016 CU18

When will Change Auditor support for Exchange 2016 CU18 ?

Revisado el: miércoles, 24 de agosto de 2022
4300767 - Change Auditor stops collecting Irregular domain replication events.

After installing the latest MSFT patches to domain controllers, CA stops collecting the irregular domain replication events from AD Connect, and...

Revisado el: miércoles, 24 de agosto de 2022
4293611 - Change Auditor support for Exchange 2013 CU18

Does Change Auditor for Exchange support Exchange 2013 CU18?

Revisado el: miércoles, 24 de agosto de 2022
4281184 - Change Auditor support for Exchange 2016

What version of Change Auditor supports Microsoft Exchange 2016?

Revisado el: miércoles, 24 de agosto de 2022
4224484 - Change Auditor SQL agents not recording SQL data.

An administrator configured a Change Auditor SQL Audit template adding each SQL server instances, and refreshed the agent configuration. However...

Revisado el: miércoles, 24 de agosto de 2022
4313002 - Change Auditor is unable to audit NetApp 8.3.1 in Cluster Mode

After successfully creating a Change Auditor NetApp Auditing Template in the Change Auditor client, NetApp events are not received by the Change...

Revisado el: miércoles, 24 de agosto de 2022
4300434 - Change Auditor sample reports

Can Support provide me with some examples or at least the most commonly used configuration for creating reports for file servers?

Revisado el: miércoles, 24 de agosto de 2022
4300281 - Change Auditor Redundancy

How to set up redundancy with Change Auditor ?

Revisado el: miércoles, 24 de agosto de 2022
4299795 - Change Auditor reports a failed event of an object being added to a AD group incorrectly.

Change Auditor r eports a failed event of an object being added to a AD group but when we check the AD group the object is actually present...

Revisado el: miércoles, 24 de agosto de 2022
4254453 - Change Auditor records file open events for multiple files when browsing a folder through a file share

Change Auditor records file open events for multiple files when browsing a folder through a file share even though the files are not explicitly...

Revisado el: miércoles, 24 de agosto de 2022
4244096 - Change Auditor Operators are unable to save Private Searches in Change Auditor Web Client

After upgrade to Change Auditor 6.5, Change Auditor Operators are unable to save Private Searches in Change Auditor Web Client but Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4236510 - Change Auditor Operators group members cannot view Start page via web client

Change Auditor Administrators can view new "Start" page on desktop and web client without issue however the Change Auditor Operators can view...

Revisado el: miércoles, 24 de agosto de 2022
4225219 - Change Auditor Operators can delete a search if it has an Alert enabled

Users who are members of the Change Auditor Operators group have permission to delete a 'shared alert'

Revisado el: miércoles, 24 de agosto de 2022
4308242 - Change Auditor install fails when creating database in Azure SQL as a Service

Change Auditor install fails when creating database in Azure SQL as a Service Error message is similar to below: [Error ODBC error: State...

Revisado el: miércoles, 24 de agosto de 2022
4243323 - Change Auditor is not consistently auditing all Active Directory events, especially user or group changes.

The Change Auditor Coordinator does not seem to be auditing all user or group changes. This has been confirmed with 'Critical Group membership...

Revisado el: miércoles, 24 de agosto de 2022
4236872 - Change Auditor installer fails if the SQL server FQDN cannot be resolved

Change Auditor 6.9.4 GA installer may fail to verify SQL connection with error similar to the following: "Connection timeout expired. The timeout...

Revisado el: miércoles, 24 de agosto de 2022
4234343 - Change Auditor is not able to enable O365 mailbox auditing on individual mailboxes if mailbox auditing is directly disabled in O365

Previously, with the “Overwrite tenant mailbox auditing settings” option in the O365 auditing template wizard, Change Auditor had the ability to...

Revisado el: miércoles, 24 de agosto de 2022
4320191 - Change Auditor for SQL Service running but not picking up changes

An Administrator noticed after a few days the Change Auditor agent stops recording SQL Data Level events. He observed the agent service is still...

Revisado el: miércoles, 24 de agosto de 2022
4318355 - Change Auditor Event capture of Exchange Mailbox Export to *.pst in Exchange Admin Center shows Mailbox GUID in lieu of name

An administrator observed that if an Exchange Mailbox is exported to *.pst from the 2013 Exchange Admin Center Change Auditor captures the Mailbox...

Revisado el: miércoles, 24 de agosto de 2022
4316101 - Change Auditor for SQL Auditing does not work on SQL Server 2017

You would like to audit Microsoft SQL Server 2017 using Change Auditor but it does not work even after everything has been properly configured...

Revisado el: miércoles, 24 de agosto de 2022
4307979 - Change Auditor Information in the Recovery Manager Online Restore Wizard Report Appears to be Incorrect

When using the Recovery Manager for AD Online Recovery Console to recover a deleted object, the user may be logged into the console with account...

Revisado el: miércoles, 24 de agosto de 2022
4300253 - Change Auditor for SQL Service running but not picking up changes

Change Auditor 6.7.1352 Agent installed on SQL server with SQL Data level Auditing enabled. However the agent does not pick up data level changes...

Revisado el: miércoles, 24 de agosto de 2022
4257081 - Change Auditor for SQL Server auditing is not generating events

When Change Auditor is auditing a SQL server, events are not being generated with a correctly configured and assigned template.

Revisado el: miércoles, 24 de agosto de 2022
4250345 - Change Auditor for NetApp vFiler configuration considerations

vFilers are ONTAP ( NetApp's proprietary operating system ) virtual containers that create separate virtual filer instances on a (physical...

Revisado el: miércoles, 24 de agosto de 2022
4243142 - Change Auditor for Linux

Is there a Change Auditor module for monitoring Linux systems or Linux file servers?

Revisado el: miércoles, 24 de agosto de 2022
4220732 - Change Auditor for EMC and NetApp Event log events missing details

Consider the following situtaion... A Change Auditor 6.5 or 6.6 Agent is configured to create events logs of the events it gathers...

Revisado el: miércoles, 24 de agosto de 2022
4220715 - Change Auditor for Netapp does not audit folder or file permission change events

Change Auditor for Netapp does not audit folder or file permission change events even though other event types are being recorded as expected...

Revisado el: miércoles, 24 de agosto de 2022
4300436 - Change Auditor do not differentiate between Metadata modification by the User and those done by Administrators

In an environment where the Users are allowed to modify/update their own Metadata in AD like Department, etc... , CA do not make a...

Revisado el: miércoles, 24 de agosto de 2022
4299672 - Change Auditor Edge Runtime dependency

Does Change Auditor 7.2 has any dependency on the Microsoft Edge WebView2 Runtime. If uninstalling Microsoft Edge WebView2 Runtime, Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4299376 - Change Auditor does not detect firewall rule changes made in a GPO

Some changes not being detected by Change Auditor For example I created a test Change Auditor 7.1.1 environment running on windows 2016 server...

Revisado el: miércoles, 24 de agosto de 2022
4292293 - Change Auditor Database Technical Insight

Information about the Change Auditor Database considerations.

Revisado el: miércoles, 24 de agosto de 2022
4266417 - Change Auditor does not show initiator for Active Roles Server events when Approval Workflow is used

Change Auditor with Active Roles Server (ARS) integration scripts deployed will not show the initiator of Approval related workflows. The event...

Revisado el: miércoles, 24 de agosto de 2022
4235389 - Change Auditor does not capture AD events, or the agent fails to start, after applying the Windows Security Baseline or enabling the Attack Surface Reduction Rule

After applying a Windows Security Baseline to the Domain Controllers, or after enabling the Attack Surface Reduction Rule, "Block credential...

Revisado el: miércoles, 24 de agosto de 2022
4231023 - Change Auditor event "Distribution List - Address list membership changed" shows all users in the group, not just the delta when distribution group is modified via Exchange

When modifying a distribution group via Exchange Management console it generates the event: "Distribution List - Address list membership...

Revisado el: miércoles, 24 de agosto de 2022
4230898 - Change Auditor does not contain Initiator for changes triggered by Dynamic Groups

During user creation the 'Initiator' is reported however when the user created is added to configured dynamic groups shortly thereafter the...

Revisado el: miércoles, 24 de agosto de 2022
4227990 - Change Auditor Deployment tab does not display any Domain Controllers for the domain

Consider the following scenarios: Change Auditor Coordinator is installed and running. The Client loads the 'Deployment' tab but no Domain...

Revisado el: miércoles, 24 de agosto de 2022
4314753 - Change Auditor Coordinator log file is not recording data

The ChangeAuditor Coordinator log file (ChangeAuditor.Service.exe.nptlog) is not recording new data even though the Change Auditor Coordinator...

Revisado el: miércoles, 24 de agosto de 2022
4306233 - Change Auditor Coordinator stops with database upgrade at 23% following upgrade to 6.8 or higher

When upgrading to Change Auditor 6.8.1537 or higher, the database initialization may fail with the following errors: 2016-11-09 14:50:28.394 [8...

Revisado el: miércoles, 24 de agosto de 2022
4305090 - Change Auditor coordinator not starting up after server reboot

when the coordinator servers reboot for their monthly patching, the coordinator service does not start up after the reboot and I have to go and...

Revisado el: miércoles, 24 de agosto de 2022
4300283 - change auditor customize reports

Custom reports for Change auditor

Revisado el: miércoles, 24 de agosto de 2022
4294255 - Change Auditor Coordinator Service cannot start

The coordinator service cannot start. The error in Coordinator logs is "Duplicate Ports Detected". 

Revisado el: miércoles, 24 de agosto de 2022
4292405 - Change Auditor Coordinator upgrade process

Replace old CA servers (Coordinator) with a new ones. 

Revisado el: miércoles, 24 de agosto de 2022
4273491 - Change Auditor coordinator service cannot start - Error in Coordinator Log "A local error has occurred"

The Change Auditor coordinator suddenly stopped and could not be started giving the error detailed in the attached change auditor coordinator log...

Revisado el: miércoles, 24 de agosto de 2022
4253955 - Change Auditor Coordinator Status displays an "Agents Connected (Total)" that is higher than the number of agents deployed

When viewing the Change Auditor Coordinator Status, the "Agents Connected (Total)" statistic displays more agents connected than are deployed in...

Revisado el: miércoles, 24 de agosto de 2022
4249638 - Change Auditor Coordinator Service will not start after upgrade when the database is involved in a database mirroring session or an availability group

The Change Auditor Coordinator Service will not start after upgrade. The following error is recorded in the Change Auditor Coordinator log: 2015...

Revisado el: miércoles, 24 de agosto de 2022
4346774 - Change Auditor Client crashes with the error, "An entry with the same key already exists"

The Change Auditor Client may crash during start-up with the following entry in the exception and the ChangeAuditor.ServiceLog log file: "An...

Revisado el: miércoles, 24 de agosto de 2022
4329662 - Change Auditor Client crashes when any action involves "Right Clicking" the search

Consider the scenario: 1:) Connected to an Archive Db using Direct Database Connection. 2:) The Client connects without issue but when under the...

Revisado el: miércoles, 24 de agosto de 2022
4318167 - Change Auditor Coordinator does not restart after server reboot

The Server that has the Change Auditor Coordinator installed on it is rebooted but the Change Auditor Coordinator service did not restart...

Revisado el: miércoles, 24 de agosto de 2022
4299973 - Change Auditor Coordinator can not get SQL EXPRESS events.

Change Auditor Coordinator can not get SQL EXPRESS events The agent logs indicate the problem: 2017-03-10 05:02:34.041 [4156][INFO] Found 1...

Revisado el: miércoles, 24 de agosto de 2022
4298803 - Change Auditor Client shows Agents status as Uninstalled

Change Auditor Client shows Change Auditor Agent as uninstalled event the version is the same and Agent status is Active in the server.

Revisado el: miércoles, 24 de agosto de 2022
4255507 - Change Auditor Coordinator installation rolls back and fails to install

The Change Auditor Coordinator installation may roll back and fail to install. An error similar to the following error is recorded in the Windows...

Revisado el: miércoles, 24 de agosto de 2022
4253695 - Change Auditor Client Deployment tab displays the old Change Auditor agent version after successful upgrade

Change Auditor Client Deployment tab displays the old Change Auditor agent version after successful upgrade. The "Agent Status" can be "Connected...

Revisado el: miércoles, 24 de agosto de 2022
4243156 - Change Auditor Client hang or crashes when trying to assign a configuration to an agent

The client will either lock up or crash when applying an agent configuration.

Revisado el: miércoles, 24 de agosto de 2022
4236469 - Change Auditor client crashes when saving changes

Change Auditor client crashes when saving changes and the following error is produced: "This channel can no longer be used to send messages as...

Revisado el: miércoles, 24 de agosto de 2022
4225460 - Change Auditor client crashes when using the column groupings on the Deployment tab

If you try to use the column grouping option on the Deployment tab the CA client crashes with the error: "Object reference not set to an instance...

Revisado el: miércoles, 24 de agosto de 2022
4313107 - Change Auditor Antivirus Exclusions

Exclude Change Auditor components and monitored processes from antivirus software.

Revisado el: miércoles, 24 de agosto de 2022
4307136 - Change Auditor Client Not Responding

Revisado el: miércoles, 24 de agosto de 2022
4289234 - Change Auditor Azure AD event log created automatically without the logging being enabled.

"Change Auditor for Azure AD." The Azure AD auditing subscription and event logging was not enabled and still the Change Auditor for Azure AD event...

Revisado el: miércoles, 24 de agosto de 2022
4254771 - Change Auditor client crashes when accessing Auditing | Attributes

The following is recorded in the Change Auditor Client and it crashes when accessing "Auditing | Attributes", clicking on a class, and loading the...

Revisado el: miércoles, 24 de agosto de 2022
4236836 - Change Auditor ARS Integration script fails to deploy with "ActiveRoles Server not installed" result

Change Auditor ARS Integration script fails to deploy with ActiveRoles Server not installed result.

Revisado el: miércoles, 24 de agosto de 2022
4236517 - Change Auditor client crashes if value over 32,767 entered for number of events in Smart Alert

Change Auditor client crashes if value over 32,767 entered for number of events in Smart Alert

Revisado el: miércoles, 24 de agosto de 2022
4351243 - Change Auditor alert queries are blocking the database

Alert queries are causing the database to hang or to become extremely slow.

Revisado el: miércoles, 24 de agosto de 2022
4320682 - Change Auditor Agents on Windows 2008 Server are not connecting to the Coordinator

You noticed that the Change Auditor Agent running on Windows 2008 Server SP1/SP2 (Legacy Agents) are not connecting anymore. The issue shows...

Revisado el: miércoles, 24 de agosto de 2022
4320257 - Change Auditor and Microsoft Server SQL Compression

Change Auditor supports compression for Microsoft SQL Server starting with the 7.0.4 release. Please find a few guidelines below.

Revisado el: miércoles, 24 de agosto de 2022
4318009 - Change Auditor Agents on Windows Server 2019 DCs trigger "Process Tampering" events in Microsoft Defender for Endpoint ATP

Change Auditor Agents installed on Windows Server 2019 Domain Controllers trigger "Process Tampering" events in Microsoft Defender for Endpoint 

Revisado el: miércoles, 24 de agosto de 2022
4312883 - Change Auditor Agent stopping after starting or running but not recording events

The Change Auditor Agent is running but is not recording events such as Active Directory or Windows File System events. The following errors are...

Revisado el: miércoles, 24 de agosto de 2022
4282949 - Change Auditor and ITAD Agent cannot run on the same machine

Is it possible for ITAD Agent and Change Auditor to run side by side on the same machine?

Revisado el: miércoles, 24 de agosto de 2022
4250636 - Change Auditor agents continually connect and disconnect from the Change Auditor Coordinator

Change Auditor agents continually connect and disconnect from the Change Auditor Coordinator and the following is recorded in the Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4249169 - Change Auditor agent upgrade error; System Pre-Requisites are not met, install cannot be completed.

The following error in presented when attempting to upgrade/deploy an agent form the “Deployment” section of the Change Auditor client: "System...

Revisado el: miércoles, 24 de agosto de 2022
4235913 - Change Auditor and the latest LDAP channel binding and LDAP signing requirements for Windows

Starting in March 2020, Microsoft will begin enforcing LDAP channel binding and LDAP signing to increase the security of network communications...

Revisado el: miércoles, 24 de agosto de 2022
4235453 - Change Auditor alerts not sent even though the new event appears in search results

Change Auditor Alerts and Alert History are not being created even though events match the Search criteria and SMTP test confirms the SMTP settings...

Revisado el: miércoles, 24 de agosto de 2022
4324619 - Change Auditor Agent is already installed and cannot be re-installed

Imagine the following scenario: A Domain Controller has been re-provisioned/re-promoted after an outage or a new OS installation has been...

Revisado el: miércoles, 24 de agosto de 2022
4320369 - Change Auditor agent fails to start after server reboot.

Change Auditor agent fails to start after server reboot and the following error is listed in Windows Event Viewer during the reboot process. This...

Revisado el: miércoles, 24 de agosto de 2022
4311133 - Change Auditor Agent service restart on a Domain Controller may cause blue screen

Restarting the Change Auditor Agent on a Domain Controller may lead to blue screen with bug check similar to: BugCheck 1E, {ffffffff80000003...

Revisado el: miércoles, 24 de agosto de 2022
4254649 - Change Auditor Agent is unable to connect to the Coordinator

The Change Auditor Agent is unable to connect to the Change Auditor Coordinator and t he following error is recorded in the Change Auditor Agent...

Revisado el: miércoles, 24 de agosto de 2022
4237042 - Change Auditor agent may cause high CPU usage by System.exe or Dfsrs.exe processes when auditing file system

Change Auditor agent when used for file-system auditing may cause excessive CPU usage on busy file servers. In particular, System.exe and/or Dfsrs...

Revisado el: miércoles, 24 de agosto de 2022
4235107 - Change Auditor Agent is unable to connect to a NetApp cluster mode filer

Change Auditor Agent is unable to connect to a NetApp cluster mode filer and the following error is recorded in the Change Auditor Agent log...

Revisado el: miércoles, 24 de agosto de 2022
4233650 - Change Auditor Agent records that a NetApp Cluster policy is created but no events are received by the Agent

A Change Auditor auditing template for a NetAppp Cluster is successfully created but repeatedly logs the records below every minute: 2015...

Revisado el: miércoles, 24 de agosto de 2022
4230903 - Change Auditor agent service fails to start after installing Windows 2016 Cumulative update KB4056890

The Change Auditor agent fails to start on Windows 2016 after installing Cumulative Update KB4056890 The following is recorded in the Change...

Revisado el: miércoles, 24 de agosto de 2022
4227796 - Change Auditor agent for NetApp not logging security changes

Change Auditor agent not logging NetApp security changes with warnings for all changes like: 2017-10-24 17:30:13.807 [2592][WARN...

Revisado el: miércoles, 24 de agosto de 2022
4322336 - Change Auditor Agent causing office documents to throw an error when opened in SharePoint

Consider Scenario: Office Web applications is integrated with Share Point to look at Office documents within Browser when opened from SharePoint...

Revisado el: miércoles, 24 de agosto de 2022
4307337 - Change Auditor agent crashes during group membership processing impacts DC operation

After applying September Microsoft patches 2016 Domain Controllers grow unresponsive and the Change Auditor agent crashes when group membership...

Revisado el: miércoles, 24 de agosto de 2022
4243132 - Change Auditor 7.x SQL Maintenance Plan

Over time index fragmentation may lead to some degraded database operations and inefficient use of space within the database. The Rebuild Index...

Revisado el: miércoles, 24 de agosto de 2022
4236786 - Change Auditor Agent error, "Connection attempt failed. No connection could be made because the target machines actively refused it"

The Change Auditor Agent will install but never shows successfully installed in the client. The following messages are observed in the Agent logs...

Revisado el: miércoles, 24 de agosto de 2022
4235693 - Change Auditor agent cannot access Azure tenant due to Internet proxy

Consider the following scenario... 1. Attempt to assign a Change Auditor agent to communicate with the azure tenant 2. The following error...

Revisado el: miércoles, 24 de agosto de 2022
4233527 - Change Auditor agent fail to start with error " Failed to generate key pair: 0x80070005"

The Change Auditor agent fail to start and the following error appear in the agent log file: ID: 1283 Time: 19/10/15 09:46:03.087 Level...

Revisado el: miércoles, 24 de agosto de 2022
4231348 - Change Auditor agent crashing when performing DLA auditing

Agent (NPSrvHost.exe) process crashes persistently after enabling SQL DLA auditing on a busy SQL with error similar to the following in the SQLDLA...

Revisado el: miércoles, 24 de agosto de 2022
4249390 - Change Auditor 7.0.3 - What is new and resolved

What are the new features and what has been resolved in Change Auditor 7.0.3?

Revisado el: miércoles, 24 de agosto de 2022
4249355 - Change Auditor 7.0.3 Latest Build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll-up...

Revisado el: miércoles, 24 de agosto de 2022
4249345 - Change Auditor 7.0.2 latest build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll...

Revisado el: miércoles, 24 de agosto de 2022
4243619 - Change Auditor 7.0.4 Latest Build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll-up...

Revisado el: miércoles, 24 de agosto de 2022
4243519 - Change Auditor 7.2.0 Latest Build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll-up...

Revisado el: miércoles, 24 de agosto de 2022
4243512 - Change Auditor 7.1.1 Latest Build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll-up...

Revisado el: miércoles, 24 de agosto de 2022
4243077 - Change Auditor 7.0.1 latest build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll-up...

Revisado el: miércoles, 24 de agosto de 2022
4238123 - Change Auditor 7.1 Latest Build (Full Maintenance Release)

The design of Change Auditor does not allow traditional hotfixes or patches to be applied. The Change Auditor Development team releases a roll-up...

Revisado el: miércoles, 24 de agosto de 2022
4233979 - Change Auditor 7.2 - What is new and resolved

What are the new features and what has been resolved in Change Auditor 7.2?

Revisado el: miércoles, 24 de agosto de 2022
4224555 - Change Auditor 7.0.4 - What is new and resolved

What are the new features and what has been resolved in Change Auditor 7.0.4?

Revisado el: miércoles, 24 de agosto de 2022
4219968 - Change Auditor 7.1 - What is new and resolved

What are the new features and what has been resolved in Change Auditor 7.1?

Revisado el: miércoles, 24 de agosto de 2022
4300249 - Change Auditor 6.5 Agent installed but will not start on a Domain Controller

After upgrading ChangeAuditor, the agent installed and it was successful, but in the Change Auditor Client shows agent status as "Never". The...

Revisado el: miércoles, 24 de agosto de 2022
4231059 - Change Auditor 6.9.5 coordinator status tray refers to all coordinator ports as agent ports

The Change Auditor 6.9.5 coordinator status refers to all coordinator ports as agent ports which is confusing as they are not all agent...

Revisado el: miércoles, 24 de agosto de 2022
4230949 - Change Auditor 5.x License counter enumerates "total users" instead of "enabled users" in Acti

Change Auditor 5.x users may recieve license warnings that the product is over the licensed amount which is based on "enabled users".

Revisado el: miércoles, 24 de agosto de 2022
4250470 - Change Agent does not send events even though it is connected

Change Agent does not send events even though it is connected and can receive new configurations from the Coordinator.  The Agent Status shows it...

Revisado el: miércoles, 24 de agosto de 2022
4225108 - Certificate expiry causes Change Auditor event forwarding to On Demand Audit to stop

Change Auditor event forwarding to On Demand Audit may stop unexpectedly. The Change Auditor Installation may show as 'Disconnected' state in the...

Revisado el: miércoles, 24 de agosto de 2022
4269452 - Certain Searches on Preview Report fail with the error, "Cannot Find Table 2"

The following error is displayed when previewing any of the PCI (3.0) and SOX (5.0) Searches in Change Auditor Client: Cannot Find Table 2 This...

Revisado el: miércoles, 24 de agosto de 2022
4249260 - Carriage Return being copied by clipboard into Change Auditor

Pasting a long complex password into Change Auditor fails authentication, however manually typing it works.

Revisado el: miércoles, 24 de agosto de 2022
4269466 - Capture user access to the Change Auditor Client

Currently user access to Change Auditor is logged into the Client log file, can such events should be also logged / recorded as Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4289058 - Cannot upgrade from 5.9.x to 6.7.1352. Error is 'Login failed for user 'domain\CoordinatorComputer$'..

Post upgrade from ChangeAuditor 5.9.x to 6.6.1352 the Coordinator stops 5 minutes after starting with the error ''Login failed for user 'domain...

Revisado el: miércoles, 24 de agosto de 2022
4227924 - Cannot upgrade / uninstall Change Auditor Agent due to EventLog record lock message

During attempt to upgrade or uninstall the Change Auditor Agents the process fails with Deployment Result: "The Windows EventLog service has a...

Revisado el: miércoles, 24 de agosto de 2022
4300224 - Cannot see events in a search of an archived database?

Using the Data Migration Tool to archive events from 2010 and 2011 to an archive database but cannot see the events when running a search against...

Revisado el: miércoles, 24 de agosto de 2022
4349004 - Cannot promote a DC after protecting the gPLink attribute on the Domain Controllers OU

Domain Administrators can't promote DCs after protecting the gPLink attribute on the Domain Controllers OU. If we disable the protection template...

Revisado el: miércoles, 24 de agosto de 2022
4305568 - Cannot poll Vcenter System.Net.WebException

Unable to audit vmware vcenter VMWare Plugin log shows error: Cannot Poll "server" System.Net.WebException: The underlying connection was...

Revisado el: miércoles, 24 de agosto de 2022
4282349 - Cannot open ... ChangeAuditor.Service.exe.nptlog Error: -2147221003

After upgrading Change Auditor from an earlier version, when trying to open the Coordinator Log from the System Tray, you may get the following...

Revisado el: miércoles, 24 de agosto de 2022
4255367 - Cannot logon to the Web Client or full CA Client.

Users who have the correct permissions (members of the Change Auditor Administrators group) cannot logon to the Web Client or the full Client.

Revisado el: miércoles, 24 de agosto de 2022
4251443 - Cannot install the agent on a server that was rebuilt with the same name

One of our server was deleted and recreated with the same name and now when we try to install the CA agent it says the target version is already...

Revisado el: miércoles, 24 de agosto de 2022
4225071 - Cannot install the ChangeAuditor agent from the Deployment tab

Cannot push agent from Deployment tab to selected servers, and, on checking the servers,  the Quest Remote install Service is stuck at starting. 

Revisado el: miércoles, 24 de agosto de 2022
4292983 - Cannot impersonate user for data source 'ChangeAuditor'. (rsErrorImpersonatingUser)

After publishing a search to SQL Server Reporting Services (SSRS) the following error may be seen when trying to run the report: An error has...

Revisado el: miércoles, 24 de agosto de 2022
4293123 - Cannot find events from failed domain controller

A domain controller failed and was rebuilt with the same name, however performing a search does not return any events from before the server was...

Revisado el: miércoles, 24 de agosto de 2022
4288367 - Cannot exclude events from SQL template

When trying to filter specific event for SQL Server , some elements like EventClass are not available in the SQL Template . Furthermore, it...

Revisado el: miércoles, 24 de agosto de 2022
4231159 - Cannot create new site collections, Quest.SharePoint.Auditing.Monitor_SiteFeature already activated

During site or site collection creation the user occasionally receives the error, "Feature 'Quest.SharePoint.Auditing.Monitor_SiteFeature' is...

Revisado el: miércoles, 24 de agosto de 2022
4236842 - Cannot create a Search for when a Managers Direct Reports change

When creating the alert for direct report changes, I'm unable get alerts for when a change is done to a specific individuals direct report. The...

Revisado el: miércoles, 24 de agosto de 2022
4306143 - Cannot connect to the Dell Change Auditor FluidFS Configuration service

During configuration of the FluidFS auditing template connection to the Dell Change Auditor FluidFS Configuration service cannot be completed and...

Revisado el: miércoles, 24 de agosto de 2022
4235678 - Cannot connect to the ChangeAuditor Client. "Database access error, please verify the ChangeAuditor database connection

The following error is returned when attempting to connect to the Change Auditor client: Cannot connect to the ChangeAuditor Client.  "Database...

Revisado el: miércoles, 24 de agosto de 2022
4315457 - Cannot connect to archive database with error login failed for user

Cannot connect to archive database with error similar to: Cannot open database "ChangeAuditor_Archive" requested by the login. The login failed...

Revisado el: miércoles, 24 de agosto de 2022
4289279 - Cannot Connect to clustered NetAPP Filer Unauthorized (401) error.

We are trying to do a CA for NetAPP cluster when entering credentials that have Administrative permissions we get a Unauthorized (401) error.

Revisado el: miércoles, 24 de agosto de 2022
4255537 - Cannot access virtual test lab at https://quest.com/registert/62208

When try to run the Virtual test lab on the Quest website at:  https://www.quest.com/register/62208/ The following error is shown while...

Revisado el: miércoles, 24 de agosto de 2022
4243348 - Cannot access the Threat Detection URL

When trying to access the Threat Detection Dashboard URL (https://fqdnservername/caui-webapp/index.html), en error is returned that the URL cannot...

Revisado el: miércoles, 24 de agosto de 2022
4275950 - Cannot access Administrator tab, it is grayed out

When in the ChangeAuditor client the View | Administrator item in the menu is grayed out.

Revisado el: miércoles, 24 de agosto de 2022
4348950 - Can you use DHCP leased IP addresses for Change Auditor hosts, or do you need to use statically assigned IPs?

Can you use DHCP leased IP addresses for Change Auditor hosts, or do you need to use statically assigned IPs?

Revisado el: miércoles, 24 de agosto de 2022
4288489 - Can we configure CA to automatically enable a protection template if it was disabled?

Is it possible to enforce and automatically enable a Protection Template after stipulated period of time when it is disabled?

Revisado el: miércoles, 24 de agosto de 2022
4310752 - Can we collect old events after enabling those events for auditing?

Can we collect old events after enabling those events for auditing? 

Revisado el: miércoles, 24 de agosto de 2022
4209324 - Can the SYSVOL File system be monitored as part of the Active Directory license?

Can Active Directory auditing include the monitoring of SYSVOL as this is part of Active Directory This can be done by Windows File Server license...

Revisado el: miércoles, 24 de agosto de 2022
4236859 - Can the Search Filters used be included in a Scheduled report?

When a report is created, is it possible to include the Search Filters used (Who, What, When, Where) to create the report, and have them displayed...

Revisado el: miércoles, 24 de agosto de 2022
4254797 - Can the same Change Auditor licenses be used for each Coordinator in a multi-forest deployment?

In order to monitor multiple Active Directory Forests, a Change Auditor Coordinator is required in each Forest. Can the same Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4235903 - Can the same Audit Data be sent to 2 separate Change Auditor Installations?

There is a need to have 2 separate Change Auditor Installations (different installation names and different databases) in the same domain. One...

Revisado el: miércoles, 24 de agosto de 2022
4243251 - Can the polling interval for Office 365 be changed?

As a CA Administrator, I would like to be able to configure how often Change Auditor polls O365 for new events 

Revisado el: miércoles, 24 de agosto de 2022
4220310 - Can the LastLogon attribute value be added to the reports?

Can we produce a report of events that include user last logon values?

Revisado el: miércoles, 24 de agosto de 2022
4237621 - Can the EMC agent audit file and folder security changes as well as any changes made to shared folders on an EMC Filer?

Can the Change Auditor Agent detect changes to the file/folder security and also any changes made to the sharing of folders? Would this be audited...

Revisado el: miércoles, 24 de agosto de 2022
4236576 - Can the default objects excluded from the AD Queries be included?

By default the following objects are excluded from AD Query Auditing: DomainName/Configuration/Schema DomainName/Configuration DomainName...

Revisado el: miércoles, 24 de agosto de 2022
4254464 - Can the Date and Time be included in scheduled report attachment file name?

Does Change Auditor have the ability to have the date\timestamp of the when the report was run included in the report attachment name?

Revisado el: miércoles, 24 de agosto de 2022
4266348 - Can the data collected by Change Auditor be written to the Windows Event Log as well?

Change the Change Auditor events be sent to the Windows Event log to be collected by a third party system?

Revisado el: miércoles, 24 de agosto de 2022
4225479 - Can the data sent to SCOM be configured?

Is it possible to customize and configure which data is sent to SCOM when a SCOM alert is configured for a particular search?

Revisado el: miércoles, 24 de agosto de 2022
4289522 - Can the coordinator be installed on a cluster?

Can the coordinator be installed on a Windows Cluster, and is this supported?

Revisado el: miércoles, 24 de agosto de 2022
4224808 - Can the coordinator send email alerts when the agents are no longer connected?

Is there a way to send immediate email alerts when the agent is no longer connected?

Revisado el: miércoles, 24 de agosto de 2022
4294790 - Can the Client or Web Client interface be displayed in another language than English

Is Change Auditor UI localized Can Change Auditor Client or Web Client be set to display in another language than English

Revisado el: miércoles, 24 de agosto de 2022
4346750 - Can the Change Auditor Coordinator be installed on Server core?

Can the Change Auditor Coordinator be installed on Server core?

Revisado el: miércoles, 24 de agosto de 2022
4314683 - Can the ChangeAuditor Operators - Administrators groups be moved or renamed

During the software installation, three installation specific security groups are created in the domain where the member server hosting a...

Revisado el: miércoles, 24 de agosto de 2022
4294428 - Can the Change Auditor Client be install on multiple workstations

An administrator wishes to install the Change Auditor client software on several workstations so that it becomes no longer necessary to run the...

Revisado el: miércoles, 24 de agosto de 2022
4249400 - Can the Change Auditor agent be deployed through 3rd party tools like SCCM?

Are 3rd party deployment tools, such as SCCM, supported for deploying the Change Auditor agents?

Revisado el: miércoles, 24 de agosto de 2022
4234152 - Can the Change Auditor database be queried to determine the version of the agents and Coordinators?

Is there a SQL query that will return the Coordinators or Agents connected to the database and their versions?

Revisado el: miércoles, 24 de agosto de 2022
4225855 - Can the Change Auditor database be hosted on the Coordinator server?

Can SQL be installed on the Coordinator server and the Change Auditor database hosted on that SQL server?

Revisado el: miércoles, 24 de agosto de 2022
4222145 - Can the Change Auditor Archive Database be set to Read-Only?

Can the Change Auditor Archive Database be set to Read-Only?

Revisado el: miércoles, 24 de agosto de 2022
4235210 - Can the Change Auditor Active Directory group be created prior to installation?

Can the Change Auditor Administrators, Operators, Agents and Web Shared Overview Users groups be create before executing the installation?

Revisado el: miércoles, 24 de agosto de 2022
4235557 - Can the AD User attribute MiddleName be monitored by Change Auditor

Can the AD User attribute MiddleName be monitored by Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4220198 - Can Searches be run using Powershell?

Is it possible to run searches, and return results, using Powershell?

Revisado el: miércoles, 24 de agosto de 2022
4237705 - Can Schema attributes be protected?

Can Schema attributes be protected so that its attributes cannot be changed?

Revisado el: miércoles, 24 de agosto de 2022
4305112 - Install new License

How to install a new license file

Revisado el: miércoles, 24 de agosto de 2022
4300211 - Install Error MSI Install: result(1603)

Unable to upgrade CA agent on server. Old version seems to be removed but still not able to install updated version. Install logs recorded the...

Revisado el: miércoles, 24 de agosto de 2022
4292287 - Install Change Auditor 7.0.3

Change Auditor 7.0.3 - Installation Guide

Revisado el: miércoles, 24 de agosto de 2022
4300416 - Initiator not available for Password changes

After installing the Active Roles integration scripts, password changes do not have an initiator UserName.

Revisado el: miércoles, 24 de agosto de 2022
4230941 - Incorrect session reporting

"A user session was ended by user locking the computer" is reporting incorrect session time. For example, the event details show the duration of...

Revisado el: miércoles, 24 de agosto de 2022
4225244 - Incorrect origin value is reported for the user lockout events.

When a user's account is locked out, Change Auditor is supposed to display the workstation or server where the lockout took place from.  In some...

Revisado el: miércoles, 24 de agosto de 2022
4233094 - Incorrect origin information for events

Change Auditor is returning the incorrect origin for events

Revisado el: miércoles, 24 de agosto de 2022
4307051 - When using Radware NLB, events show the NLB IP Address for Exchange events

When Exchange Servers are being a Radware NLB ( Network Load Balancer ), the events captured by Change Auditor display the NLB IP Address...

Revisado el: miércoles, 24 de agosto de 2022
4300072 - When using IT Security Search will I see events from Change Auditor archived DBs?

When using IT Security Search can the production and multiple Change Auditor archived Databases be searched at the same time? 

Revisado el: miércoles, 24 de agosto de 2022
4249469 - Long running query detected. Problem report is located in <GUID>.xml

Reviewing the Coordinator logs you find  -  SQL error: TIMEOUT on INSERT INTO dbo.AuditEvent_AlertQueue ( QueryID, AlertTypeID, TimeReceived, _id...

Revisado el: miércoles, 24 de agosto de 2022
4295247 - Logon activity with expired license

If the Logon activity license has expired, will Change Auditor Agent still listen for these Audit Event types?

Revisado el: miércoles, 24 de agosto de 2022
4219971 - Logon Attribute Monitoring

User Object class attributes related to logon process, lastLogon, lastLogonTimestamp, badPwCount, badPasswordTime are not audited even when...

Revisado el: miércoles, 24 de agosto de 2022
4254387 - Logon Activity Reports display the Duration in an unreadable format

When using the Report Preview or sending a Report using the Report tab, the "Logon Duration" is displayed as it is recorded in the database rather...

Revisado el: miércoles, 24 de agosto de 2022
4231044 - Log files can grow to unlimited size

Very rare scenario where agent log file may not roll over as expected and instead continue to grow indefinitely until the agent is stopped, log...

Revisado el: miércoles, 24 de agosto de 2022
4299941 - Lockedout Event not showing the right source computer data

In some cases, Change Auditor is showing a an incorrect source computer for a Locked Out Event

Revisado el: miércoles, 24 de agosto de 2022
4306329 - Local group/user monitoring on a member server is not being audited

Local group/user monitoring on a member server is not sending changes to Change Auditor. Any changes made to the local administrator group on a...

Revisado el: miércoles, 24 de agosto de 2022
4294834 - Local shared added and Local Share permissions changed events are not recorded when share is created in Server Manager or PowerShell

When a new share is created and permissions are added using Windows Explorer (Properties | Sharing | advanced sharing | Share this folder) in a...

Revisado el: miércoles, 24 de agosto de 2022
4255511 - Local folder deletions are not being audited

Local folder deletions are not being picked up if the folder has files in it.  The file deletions are captured however the folder deletion is not...

Revisado el: miércoles, 24 de agosto de 2022
4218648 - Linking and unlinking GPOs from the root domain level do not generate events.

When a GPO is linked or unlinked from the root level domain, it is expected that a "Group Policy Linked" or "Group Policy Unlinked" event is...

Revisado el: miércoles, 24 de agosto de 2022
4250428 - Layout drop-down box on the Report tab of a Search is disabled and cannot be modified

Layout drop-down box on the Report tab of a Search is disabled (grayed-out) and cannot be modified even though other settings on the tab can be...

Revisado el: miércoles, 24 de agosto de 2022
4294282 - Large Trace Log Files exceeding 10 MB

Administrators may notice very large Trace Log Document files in the ChangeAuditor agent directory.

Revisado el: miércoles, 24 de agosto de 2022
4219843 - Large number on Event ID 8354 events in the Microsoft SQL Server Application log after enabling Change Auditor for SQL auditing

Large number on Event ID 8354 events in the Microsoft SQL Server Application log after enabling Change Auditor for SQL auditing. The error is...

Revisado el: miércoles, 24 de agosto de 2022
4252970 - Knowledge Portal does not enumerate domain users when setting security - only shows local users and groups on the QKP server.

When going through the security properties wizard to assign permissions, the search does not return any domain results. It only returns results of...

Revisado el: miércoles, 24 de agosto de 2022
4236814 - Kerberos Authentication events are no longer captured after applying the latest Windows Updates

After applying the latest Microsoft Windows updates, Change Auditor no longer captures the following events: "User failed to authenticate through...

Revisado el: miércoles, 24 de agosto de 2022
4231175 - Kerberos authentication events for Exchange HealthMailbox show the WHO as the DC computer account

Kerberos authentication events such as "User authenticated through Kerberos" for Exchange HealthMailbox accounts show the WHO as the DC computer...

Revisado el: miércoles, 24 de agosto de 2022
4236863 - JPG file generates a file open event (option to suppress enabled) when displayed in Windows Explorer Tile view or Icon view

JPG files may generate file open events when displayed in Windows Explorer Tile or Icon views when the "Discard file open events from browsing...

Revisado el: miércoles, 24 de agosto de 2022
4243356 - Job Archive to rerun after five minute cool down.

Change Auditor archive job runs for 30 seconds every 5 minutes then enters cool down.  SQL Timeout warning is seen in the Coordinator log. SQL...

Revisado el: miércoles, 24 de agosto de 2022
4294191 - Issues with CA agent installs

Revisado el: miércoles, 24 de agosto de 2022
4320864 - Issue with Installation name legnth when installing version 6.7 or above

The following error is observed when trying to upgrade the Coordinator to the latest version: "The Change Auditor installation name you entered...

Revisado el: miércoles, 24 de agosto de 2022
4294446 - Isilon Auditing path

Not getting events though configuration and template  appear to be correct.

Revisado el: miércoles, 24 de agosto de 2022
4224039 - Is using Microsoft SQL Server installed on a Linux server supported?

It is supported to host the Change Auditor database on Microsoft SQL server installed on an Linux server?

Revisado el: miércoles, 24 de agosto de 2022
4294823 - Is to possible migrate several installations into a new installation?

Is it possible to migrate and merge several CA DBs into one new one?

Revisado el: miércoles, 24 de agosto de 2022
4230553 - Is there is a way to prevent users from stopping, disabling and/or uninstalling the Change Auditor agents from their workstations?

Is there is a way to prevent users from stopping, disabling and/or uninstalling the Change Auditor agents from their workstations?

Revisado el: miércoles, 24 de agosto de 2022
4319094 - Is there any way to create multiple protection templates that targets to the same OU?

An administrator is trying to create two different protection templates in Active Directory and apply them to the same OU. He needs to protect the...

Revisado el: miércoles, 24 de agosto de 2022
4300549 - Is there a x86 agent available in 6.9?

Downloaded the Change Auditor 6.9.1 package. However I only see the Change Auditor Agent 6.8 for X86. Is there a X86 Agent for 6.9.1?

Revisado el: miércoles, 24 de agosto de 2022
4348943 - Is there a way we can vault the Change Auditor database connection account in 3rd party password vaults?

Is there a way we can vault the Change Auditor database connection account in 3rd party password vaults such as Cyberark?

Revisado el: miércoles, 24 de agosto de 2022
4243205 - Is there a way to tell what events are consuming the most space in the database?

Is it possible to determine which event(s) are using the most disk space?

Revisado el: miércoles, 24 de agosto de 2022
4266410 - Is there a way to specify a specific Change Auditor Coordinator for a Purge job or Archive Job to run on?

In a multi-coordinator environment, is there a way to specify which Change Auditor Coordinator for a Purge or Archive job to run on? In some...

Revisado el: miércoles, 24 de agosto de 2022
4266432 - Is there a way to monitor the "Trusted for Delegation" property on computer or server objects?

In some situations, it may be necessary to monitor unique attributes or options for computer/server objects such as "Trusted for Delegation". Is...

Revisado el: miércoles, 24 de agosto de 2022
4234673 - Is there a way to include a "description" of an event to the standard report layout

Can the details of the event (what changed) be added to the reports?

Revisado el: miércoles, 24 de agosto de 2022
4317430 - Is there a way to customize or change the report filters after the SQL Reporting Services (SRS) r

Is there a way to customize or change the report filters after the SQL Reporting Services (SRS) reports are created via the ChangeAuditor Client...

Revisado el: miércoles, 24 de agosto de 2022
4318881 - Is there a way to configure a SQL Audit Template to exclude recording selected events that are triggered by a specific user for a specific database?

An Administrator needs to configure a SQL Audit Template to exclude recording selected events that are triggered by a specific user for a specific...

Revisado el: miércoles, 24 de agosto de 2022
4225163 - When more than one "*Like Wildcards" are added to the WHERE tab, no search results are returned.

If multiple wildcard values are added to the WHERE tab of a search, no results are returned.  If any single wildcard is used, it works as expected.

Revisado el: miércoles, 24 de agosto de 2022
4294269 - When making modifications to a GPO, receive number instead of the modification done

When making modifications to a GPO , receive number instead of the details of the modification done

Revisado el: miércoles, 24 de agosto de 2022
4236386 - When is an Archive database eligible to be detached and moved to less expensive storage?.

When is an Archive database eligible to be detached and moved to less expensive storage?

Revisado el: miércoles, 24 de agosto de 2022
4306294 - When executing a built in search, a violation of primary key constraint error shows up.

When runing a builtin search, the Change Auditor Client presents a pop up with a violation of primary key error similar to: Violation of PRIMARY...

Revisado el: miércoles, 24 de agosto de 2022
4284983 - When deleting a group or user in Active Directory the member removed from group event is missed.

When deleting a group object, ChangeAuditor does not catch the group members being removed from the group. Likewise, when deleting a user, the...

Revisado el: miércoles, 24 de agosto de 2022
4315560 - When creating a Purge or Archive job, the Back, Finish and Cancel buttons in the wizard become unresponsive

While creating a Purge or Archive job in the Change Auditor Client, on the second window of the Purge and Archive Job Wizard will not respond when...

Revisado el: miércoles, 24 de agosto de 2022
4300309 - When creating Alerts in Change Auditor, what variables are available for the TO field

When creating Alerts in Change Auditor , what variables are available for the TO field?

Revisado el: miércoles, 24 de agosto de 2022
4288506 - When creating a new share via the Create A Shared Folder Wizard (via the Computer Management Console), the default permissions are not captured.

When creating a new share via the Create A Shared Folder Wizard (via the Computer Management Console), any initial changes from the default...

Revisado el: miércoles, 24 de agosto de 2022
4224395 - When connected to an Archive Database, the "Add" option is grayed out under the "What" tab, is th

When connected to an Archive Database, the "Add" option is grayed out under the "What" tab, is this expected?

Revisado el: miércoles, 24 de agosto de 2022
4237699 - When auditing SQL where is the audit data pulled from?

Where does the agent get the audit data when auditing SQL?

Revisado el: miércoles, 24 de agosto de 2022
4249481 - When attempting to upgrade the web client, the installation errors out and fails

The Web Client installer fails with an error similar to the following: "Quest Change Auditor 7.x.x Web Client setup wizard ended prematurely...

Revisado el: miércoles, 24 de agosto de 2022
4223305 - When attempting to protect DNS Zones, the zone name is not displayed until after it is added for protection

When attempting to protect a DNS Zone, something directly under either the Forward or Reverse Lookup Zones, the name is not present in the dialog...

Revisado el: miércoles, 24 de agosto de 2022
4288903 - When attempting to make a database direct connection to an archive database, the connection fails

When logged in as a user who doesn't have database access, and attempting to make a database direct connection (to an archive database), the...

Revisado el: miércoles, 24 de agosto de 2022
4294142 - When attempting to install the Change Auditor Agent, the Deployment tab shows the error "the specified network name is no longer available (64)"

When attmepting to install a Change Auditor Agent via the Deployment tab of the Change Auditor Client, the following error is displayed: "The...

Revisado el: miércoles, 24 de agosto de 2022
4227909 - When attempting to add a template results in error, 'Object already exists.'

When creating a template, the client crashes after attempting to add the template (clicking Finish). The un-handled exception ' Object already...

Revisado el: miércoles, 24 de agosto de 2022
4288840 - When alerting on the 'Computer Object added' event, is it possible to filter the Alert for only Window Servers?

When using the "Computer Object Added" event, all computer  objects added to the domain are returned, server and workstation.  Is it possible to...

Revisado el: miércoles, 24 de agosto de 2022
4266475 - When adding a new agent to an EMC auditing template, the agent server is not listed

When adding a new agent to an EMC auditing template, the new agent server is not listed in the drop-down menu

Revisado el: miércoles, 24 de agosto de 2022
4234960 - When a password is reset, is it possible for the affected user to get an alert as well?

When an alert is created for a password reset, it may be desirable to have the affected user receive the alert as well. Is there currently a...

Revisado el: miércoles, 24 de agosto de 2022
4236809 - Whats the difference between Change Auditor for Active Directory vs Change Auditor for Active Directory Queries

What is the different between CA for AD and CA for AD Queries? Can they be licensed separately?

Revisado el: miércoles, 24 de agosto de 2022
4306842 - What versions of SQL are supported?

Would like to know the recommendation for SQL. Can everything be installed on the same server with SQL Express or should this be put on a full...

Revisado el: miércoles, 24 de agosto de 2022
4243416 - What versions of SQL does Change Auditor 7.x support?

What are the SQL requirements for Change Auditor 7.x?

Revisado el: miércoles, 24 de agosto de 2022
4243302 - What versions of SQL does Change Auditor 6.9.5 support?

What versions of SQL does Change Auditor 6.9.5 support?

Revisado el: miércoles, 24 de agosto de 2022
4300310 - What versions of Microsoft SQL are supported by Change Auditor?

What versions of Microsoft SQL are supported by Change Auditor ?

Revisado el: miércoles, 24 de agosto de 2022
4244193 - What versions of Change Auditor support Microsoft SQL Server 2012 SP2?

What versions of Change Auditor Coordinator and Agents have been tested and support Microsoft SQL Server 2012 SP2?

Revisado el: miércoles, 24 de agosto de 2022
4255469 - What versions are supported for SQL Server® auditing.

Which SQL Server versions are supported for Auditing.

Revisado el: miércoles, 24 de agosto de 2022
4233698 - What version of SNMP is supported by Change Auditor

What version of SNMP is supported by Change Auditor? 

Revisado el: miércoles, 24 de agosto de 2022
4294774 - What version is the Change Auditor Legacy Agent?

For customer who need to install InTrust Agent on a non supported OS like Windows 2008 due to the lack of support of .Net 4.5 , InTrust has...

Revisado el: miércoles, 24 de agosto de 2022
4211853 - What version of .NET is needed to install the agents?

What version of .NET do the agents require?

Revisado el: miércoles, 24 de agosto de 2022
4270859 - What types of server clusters are supported by ChangeAuditor?

Are Exchange and Microsoft File Server clusters supported in change auditor?

Revisado el: miércoles, 24 de agosto de 2022
4233549 - What types of encryption does the ChangeAuditor Client use

Revisado el: miércoles, 24 de agosto de 2022
4233627 - What types of authentication can ChangeAuditor use for SQL?

What types of authentication can ChangeAuditor use for SQL?

Revisado el: miércoles, 24 de agosto de 2022
4317931 - What timezone is used for the "When" time stamp on the ChangeAuditor event details

When viewing a ChangeAuditor event in the ChangeAuditor Client, what timezone is used for the "When" time stamp on the ChangeAuditor event details...

Revisado el: miércoles, 24 de agosto de 2022
4244100 - What SQL scripts are executed to create the Change Auditor database?

Administrators may want to review the SQL scripts that are used when creating the Change Auditor database.

Revisado el: miércoles, 24 de agosto de 2022
4233272 - What SQL version does 6.8 support

Does Change Auditor 6.8 support SQL 2016?

Revisado el: miércoles, 24 de agosto de 2022
4294778 - What should be put as "Source Type" in Splunk?

In Splunk , when creating a Source , a Source Type is asked to be selected. What is the setting to select here?

Revisado el: miércoles, 24 de agosto de 2022
4237636 - “ERR_ACCESS_DENIED” when accessing the Threat Detection portal

You may receive “ERR_ACCESS_DENIED” when accessing the Threat Detection portal using chrome browser. This issue may occur when incorrect password...

Revisado el: miércoles, 24 de agosto de 2022
4219392 - “Error: 297, Procedure: usp_SQL_Lock_Read, Message: The user does not have permission to perform this action.”

After selecting an item in the Change Auditor client, a message box with the following error is shown: Error: 297, Procedure: usp_SQL_Lock_Read...

Revisado el: miércoles, 24 de agosto de 2022
4255420 - WriteConnectionEvent failed warning in Coordinator log

In the Coordinator log it is noted the warning WriteConnectionEvent failed with the following exception: System.ArgumentNullException: Array...

Revisado el: miércoles, 24 de agosto de 2022
4346991 - Writable DC acting as PDC stops responding because of the Change Auditor agent.

The PDC Role Domain Controller stopped responding cause looks like filter driver CAADFlt.sys is responsible.

Revisado el: miércoles, 24 de agosto de 2022
4235718 - Write operations on shared folders taking longer after the Change Auditor Agent is installed on a Windows 2008 R2 Domain Controller

After installing the Change Auditor Agent on Windows 2008 R2 based Domain Controllers, write operations on shares hosted on the Domain Controller...

Revisado el: miércoles, 24 de agosto de 2022
4227829 - Would like Active Directory attribute 'Manager' available for searching

All users have the Active Directory attribute 'Manager' populated. Would like to have that field stored within ChangeAuditor so that searching can...

Revisado el: miércoles, 24 de agosto de 2022
4227490 - Working with SCOM 2007 and MOM 2005, how do I set this up?

Revisado el: miércoles, 24 de agosto de 2022
4233524 - Workgroup/Foreign Forest Agent cannot connect to Coordinator warning, "Request for principal permission failed"

After deploying an Agent to a workgroup or a foreign forest computer the following warning message appears in the ChangeAuditor.ServiceLog.nptlog...

Revisado el: miércoles, 24 de agosto de 2022
4297678 - WIX Error when installing agent

When upgrading agent 7.0.2 agent to 7.0.3 Error generated "quest change auditor custom actions for wix error"9"

Revisado el: miércoles, 24 de agosto de 2022
4254403 - Windows File System monitoring not recording events after upgrade to Change Auditor 6.5

After upgrade to Change Auditor 6.5, Windows File System monitoring not recording events even though ChangeAuditor agent appears online. The...

Revisado el: miércoles, 24 de agosto de 2022
4233356 - Windows 2012 Protected Service enabled for LSASS prevents Change Auditor Agent service deploying/running

After setting Windows Server 2012 "Protected Service" enabled for LSASS, the Change Auditor Agent service deploys but starts and stops after...

Revisado el: miércoles, 24 de agosto de 2022
4236673 - Win32 error(53) during agent deployment

During agent deployment the following error is reported by coordinator: Win32 error(53). Network host not found.

Revisado el: miércoles, 24 de agosto de 2022
4243330 - Will the Change Auditor agent run on the same server as the Google GAPS agent?

Can the Change Auditor agent run alongside the Google 'GAPS' agent with no issues? 

Revisado el: miércoles, 24 de agosto de 2022
4225124 - Will SQL Server Reporting Services still work after upgrading to Change Auditor 6.5+?

Will the reports previously published to SQL Server Reporting Service (SRS) still work after upgrading to Change Auditor 6.5?

Revisado el: miércoles, 24 de agosto de 2022
4234526 - Will purging AD query events from ChangeAuditor effect any other events

Will purging AD query event have an impact on the ability to report on any other events captured by Change Auditor (AD, File System, etc)

Revisado el: miércoles, 24 de agosto de 2022
4237866 - Will increasing the Domain or Forest Functional level affect Change Auditor?

If the Domain or Forest functional level is increased, or another type of Schema change occurs, is there any impact to Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4251462 - Will a Leap Second affect the product functionality?

A leap second is a one-second adjustment that is occasionally applied to Coordinated Universal Time (UTC) in order to keep its time of day close to...

Revisado el: miércoles, 24 de agosto de 2022
4288666 - Why the Database files Modified Date are not updated regularly while events are coming all the time?

Why the Database files Modified Date are not updated regularly while events are coming all the time? How does the events are injected in the...

Revisado el: miércoles, 24 de agosto de 2022
4234355 - How to determine which SQL sever and database Change Auditor is currently using?

It may be necessary to verify the existing SQL connection information that Change Auditor is currently using

Revisado el: miércoles, 24 de agosto de 2022
4213665 - How to determine which versions of .NET 4 are installed

How to determine which versions of .NET 4 are installed

Revisado el: miércoles, 24 de agosto de 2022
4249510 - How to determine which audit events are associated with a particular license type?

Need to determine which audit events belong to each license type?

Revisado el: miércoles, 24 de agosto de 2022
4233974 - How to determine which agents are auditing a specific subsystem

Is there a way to determine which agents are performing specific auditing, such as Windows File System, SQL, NetApp, etc?

Revisado el: miércoles, 24 de agosto de 2022
4263406 - How to determine how many Service Connection Points (SCP) exist in the environment

There are multiple issues that may occur should there be stale Coordinator SCPs in the environment. For example, Agents may continue to attempt...

Revisado el: miércoles, 24 de agosto de 2022
4237812 - How to deploy the new Quest ChangeAuditor scripting module for use with ActiveRoles Server when upgrading from a much earlier version

How to deploy the new Quest ChangeAuditor Dynamic Directory Control (DDC) scripting module for use with ActiveRoles Server, when upgrading from a...

Revisado el: miércoles, 24 de agosto de 2022
4249475 - How to deploy the Active Roles Integration script

What steps are needed to deploy the ARS integration script?

Revisado el: miércoles, 24 de agosto de 2022
4234995 - How to delete and re-apply Change Auditor licenses

How to delete and re-apply Change Auditor licensing.

Revisado el: miércoles, 24 de agosto de 2022
4311524 - How to delete / reset change auditor agent cache / database

How to delete / reset change auditor agent cache / database

Revisado el: miércoles, 24 de agosto de 2022
4224095 - How to decommission a coordinator server and remove Quest software

A coordinator server is being decommissioned or removed. Would like to remove all Quest software beforehand to ensure agents connect to new or...

Revisado el: miércoles, 24 de agosto de 2022
4211342 - How to customize WebClient login page

Are there any friendly means of customizing login page of the Web Client? Sometimes it is necessary (especially for secure environments) to hide...

Revisado el: miércoles, 24 de agosto de 2022
4319087 - How to create High Severity event alert if a member of the Domain Admin group access a specific folder or its subdirectories.

An administrator need to configure a Custom High Severity alert to notify of changes made to a specific folder/sub-folder by members of the Domain...

Revisado el: miércoles, 24 de agosto de 2022
4311839 - Error Bulk Insert

"Error running bulk insert audit event" error in the logs.

Revisado el: miércoles, 24 de agosto de 2022
4278251 - Error Access Denied when attempting to add unmonitored Attributes

need to add un-monitored attributes to a schema class, but when selecting the schema class (any) ChangeAuditor client throws the error Access...

Revisado el: miércoles, 24 de agosto de 2022
4269197 - Error : A unknown failure during deployement occurred.

When Trying to upgrade an Agent, the Following Error Occurs 'A unknown failure during deployement occurred.'

Revisado el: miércoles, 24 de agosto de 2022
4273506 - Error - Could Not Contact *.*.*.* to verify password. Password will not be Saved

VMware unable to connect to the Esx virtual Centre or Host when creating template : Could Not Connect to *.*.*.* to verify password, Password will...

Revisado el: miércoles, 24 de agosto de 2022
4306494 - Error - : win32 error(1619) while deploying to "Windows Domain Controller". This installation package could not be opened.

When attempting to deploy the Change Auditor Agent from the Client Deployment tab the install fails with following error 'Error - : win32 error...

Revisado el: miércoles, 24 de agosto de 2022
4223446 - Error 'Database Upgrade Failed' is presented when trying to upgrade a 6.x database with a higher version of 6.x Client.

When connecting a Change Auditor 6.x Client to an earlier version of Change Auditor 6.x database, the expectation is that this should upgrade the...

Revisado el: miércoles, 24 de agosto de 2022
4224437 - Error "The request failed with HTTP status 401: Unauthorized."

Error "The request failed with HTTP status 401: Unauthorized." when accessing the Quest Knowledge Portal.

Revisado el: miércoles, 24 de agosto de 2022
4214976 - Error "ChangerAuditor installation issue with general fatal error code: 1603"

Installation issue with CA Client with general fatal error code:1603 which appears to be attributed to .NET Framework corruption if ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4322443 - ER: when publishing report "Error 1385" received

Error 1385 generated when publishing report if user does not have logon local permission to reporting server. Continuing past error seems to allow...

Revisado el: miércoles, 24 de agosto de 2022
4346890 - Enhancement Request: Built-in searches for each risky sign-in event type including leaked credentials

There is a built in a report called All Azure Active Directory sign-in risk event changes in the last 7 days, but I would like a similar report for...

Revisado el: miércoles, 24 de agosto de 2022
4280786 - Enhancement request to have reports in xlsx format

Is it possible that the reports are in xlsx format?

Revisado el: miércoles, 24 de agosto de 2022
4299456 - Enhancement Request - Allowed Coordinator failover behavior with a SIEM appliance

As a CA Admin, I would like SIEM subscriptions to fail over between available coordinators when an allowed coordinator can no longer communicate...

Revisado el: miércoles, 24 de agosto de 2022
4351093 - Enabling shared folder gives an "Invalid Credentials" error when the share is located on the Coordinator server

Trying to enable the Shared folder configuration when the Share is located on the coordinator server returns an "Invalid Credentials" error, even...

Revisado el: miércoles, 24 de agosto de 2022
4218654 - Enabling and Disabling ChangeAuditor AD Query auditing

There may be a need to enable or disable the Change Auditor AD Query auditing.  Below are thet steps to accomplish this.

Revisado el: miércoles, 24 de agosto de 2022
4299857 - Enable Shared folder for reporting fails with authentication error

Enable Shared folder for reporting fails with Invalid credentials: account

Revisado el: miércoles, 24 de agosto de 2022
4294356 - Enable Group Changes based on a specific OU

How to create a search based on group membership changes to groups in a specific OU (Organizational Unit).

Revisado el: miércoles, 24 de agosto de 2022
4224179 - How to create an Excluded Account Template for a local user

How to create an Excluded Account Template for a local user, when you see such events as " Local User logged On".

Revisado el: miércoles, 24 de agosto de 2022
4306567 - How to create an alert for any password changes to a specific account

How to create a search/alert for any password changes to a specific account

Revisado el: miércoles, 24 de agosto de 2022
4249421 - How to create an Alert for when objects are not created in the correct container in AD

Certain object types (for example Contact objects) should be created only in specific containers. How to create an Alert to be notified when the...

Revisado el: miércoles, 24 de agosto de 2022
4243307 - How to create an archive job for database maintenance.

How to create an archive job to maintain the database?

Revisado el: miércoles, 24 de agosto de 2022
4243237 - How to Create an alert to notify when a Service is stopped or started

Would like to monitor services on all domain controllers, and alert when the service is stopped or started. 

Revisado el: miércoles, 24 de agosto de 2022
4219789 - How to Create an alert to notify when a ChangeAuditor agent is disconnected

How to Create an alert to notify when a ChangeAuditor agent is disconnected

Revisado el: miércoles, 24 de agosto de 2022
4294517 - How to create an alert for adding or removing members from a local group.

Have a need to monitor and alert on a local group (administrators) on member servers.

Revisado el: miércoles, 24 de agosto de 2022
4237719 - How to create an alert for adding or removing members from a specific Active Directory security group.

How to create a search/ alert for if a specific Active Directory security group has its members modified.

Revisado el: miércoles, 24 de agosto de 2022
4288926 - How to create a VMware Template to collect logs from vCenter

This is a quick guide on how to create a Template when wanting to collect logs from vCenter instead of just ESXI Hosts.

Revisado el: miércoles, 24 de agosto de 2022
4346976 - How to create a Service auditing template

I wish to audit service start and stop activity using the Change Auditor agent

Revisado el: miércoles, 24 de agosto de 2022
4320873 - How to create a search for any changes related to a specific security group

An administrator need to create a search that return events for changes made to a specific Security (nested) group. This document will provide the...

Revisado el: miércoles, 24 de agosto de 2022
4319459 - How to create a search for all changes made by a specific account

An administrator need to create a search that returns all changes made in his environment by a specific user account. This document will list the...

Revisado el: miércoles, 24 de agosto de 2022
4316284 - How to create a Search with Active Directory objects from two Forests

Administrators may want to create a Search that contains Active Directory (AD) objects (such as OU or User) from two Active Directory Forests...

Revisado el: miércoles, 24 de agosto de 2022
4294491 - How to create a search to generate an alert for any Users or Groups when they login to any servers

Purpose: Alert that generate for any Users or Group ( e.g. Domain Admins ) if they login to any of the Servers Requirement: In order...

Revisado el: miércoles, 24 de agosto de 2022
4255481 - How to create a search for the event(s) associated with an Active Directory user account that was deleted.

An administrator needs to find the events associated with an Active Directory user account that was deleted. The Administrator is not able to...

Revisado el: miércoles, 24 de agosto de 2022
4254623 - How to create a Search to filter Active Directory events

Video solution discussing how to create a new Search in Change Auditor and filter for certain Active Directory events.

Revisado el: miércoles, 24 de agosto de 2022
4237807 - How to create a search to find who deleted a file?

How to return who deleted a specific file?

Revisado el: miércoles, 24 de agosto de 2022
4220656 - How to create a search for the event(s) associated with an Active Directory Group account that was deleted

An administrator needs to find the events associated with an Active Directory Group account that was deleted.Not able to target the account by...

Revisado el: miércoles, 24 de agosto de 2022
4219830 - How to create a search for group objects that were deleted

How to configure a search to return "Group object removed" events

Revisado el: miércoles, 24 de agosto de 2022
4320868 - How to create a search filter for a specific user account

An administrator needs to create a search for events associated  with a specific user account.

Revisado el: miércoles, 24 de agosto de 2022
4220731 - How to create a search and alert for files that are renamed to a specific extension

Some customers may want to be notified when files are renamed to a specific extension.

Revisado el: miércoles, 24 de agosto de 2022
4236166 - How to create a report of each time an alert was sent

Need to generate a report for every time an alert was generated within given dates.

Revisado el: miércoles, 24 de agosto de 2022
4219880 - How to create a report on properties of the Search including the alert email information

Administrators may have a requirement to export properties of the Search including the alert email information in PDF format.

Revisado el: miércoles, 24 de agosto de 2022
4243220 - How to create a report in Change Auditor?

How can a report be created and produced in Change Auditor?

Revisado el: miércoles, 24 de agosto de 2022
4224045 - How to create a report for changes to Active Directory Sites and Subnets

How to create a report to show changes made to Active Directory Sites and Subnets

Revisado el: miércoles, 24 de agosto de 2022
4351160 - How to create a Protection Template to protect a group in AD

How to create and deploy a protection template for a Group object in Active Directory

Revisado el: miércoles, 24 de agosto de 2022
4243022 - How to create a new database and point Coordinator to the new database?

How to create a new database and point Coordinator to the new database? 

Revisado el: miércoles, 24 de agosto de 2022
4288763 - How to create a manual profile to connect to a Coordinator in another domain.

Need to connect to a Coordinator in another domain but Client does not provide a connection.

Revisado el: miércoles, 24 de agosto de 2022
4320057 - How to create a File System Filter to target events for files with a specific string in their name

This document provides the steps on how to create a File System events search for file that contains a specific string in their name. The example...

Revisado el: miércoles, 24 de agosto de 2022
4319513 - How to create a File System Template

This document will provide the steps for creating a Change Auditor File System Template.

Revisado el: miércoles, 24 de agosto de 2022
4254339 - How to create a ChangeAuditor Search to filter by SAMAccountName of an Active Directory user object

Administrators may have a requirement to create a Search to filter by SAMAccountName or a partial SAMAccountName Active Directory user object using...

Revisado el: miércoles, 24 de agosto de 2022
4236519 - How to create a 'pie chart' or 'bar graph' search

Revisado el: miércoles, 24 de agosto de 2022
4297442 - How to connect your Change Auditor client to a different Database Catalogue?

When archive databases are in place and need to connect your client to them so the archive data is accessible.  

Revisado el: miércoles, 24 de agosto de 2022
4219819 - How to connect to a ChangeAuditor archive database from the ChangeAuditor Client?

How to connect to a ChangeAuditor archive database from the ChangeAuditor Client?

Revisado el: miércoles, 24 de agosto de 2022
4317454 - How to configure WMI Event Consumer for ChangeAuditor WMI

Consider the scenario: 1) On any Search WMI alert is enabled. 2) Need to confirm that WMI Alerts are being processed.

Revisado el: miércoles, 24 de agosto de 2022
4318185 - How to configure SQL Data Level Audit

This document describes the steps for configuring SQL data level Audit in Change Auditor 

Revisado el: miércoles, 24 de agosto de 2022
4262053 - How to configure SQL Auditing in ChangeAuditor for SQL

This is a video guide on setting up SQL Auditing within ChangeAuditor

Revisado el: miércoles, 24 de agosto de 2022
4233669 - How to configure SQL Profiler for Change Auditor troubleshooting

During Change Auditor troubleshooting it is required to run SQL Profiler while Change Auditor is executing a certain operation. The following...

Revisado el: miércoles, 24 de agosto de 2022
4244105 - How to configure local group monitoring in ChangeAuditor

How to configure local group monitoring in ChangeAuditor in order to monitor changes.

Revisado el: miércoles, 24 de agosto de 2022
4318927 - How to configure File System Template exclusions

An administrator needs to restrict the agent capturing events from specific files or folders. This document will outline the process of adding an...

Revisado el: miércoles, 24 de agosto de 2022
4318457 - How to configure Filesystem template for paths are under qtrees for NetApp in Clustered Mode

An administrator needs an example of how to configure shares under a Qtree for a NetApp in Cluster Mode.

Revisado el: miércoles, 24 de agosto de 2022
4255596 - How to configure Excluded Accounts in Change Auditor

Service or machine accounts (SERVERNAME$) can be a source of significant amounts of database clutter or noise. If there are no security...

Revisado el: miércoles, 24 de agosto de 2022
4320807 - How to configure Change Auditor to capture changes made to Fine-Grained Password and Account Lockout Policies

By default, Change Auditor is not configured to capture changes that are made to Active Directory Domain Services Fine-Grained Password and...

Revisado el: miércoles, 24 de agosto de 2022
4237359 - How to configure Change Auditor and IT Security Search Integration

How do you configure the integration between Change Auditor and IT Security Search At this time, standard SQL Server database access is used to...

Revisado el: miércoles, 24 de agosto de 2022
4224401 - How to configure an Alert that triggers when a file is renamed with a specific extension

Need to configure a Search/Alert to send an email notification when a file extension is changed to a specific string.

Revisado el: miércoles, 24 de agosto de 2022
4319353 - How to configure a search to return only successful Group Membership Changed events

An administrator needs to configure a Group Membership Changed report so the results only returns when members are successfully added or removed...

Revisado el: miércoles, 24 de agosto de 2022
4318190 - How to configure a search for users who were granted interactive logon rights to a server.

An administrator need to know how to configure a search for users who were granted interactive logon rights to a server.

Revisado el: miércoles, 24 de agosto de 2022
4237226 - How to configure a search for "User employeeID changed"

Administrators may need to configure a Change Auditor search for "User employeeID changed" events.

Revisado el: miércoles, 24 de agosto de 2022
4306208 - How to completely remove a Change Auditor 6.x Agent from a server without the installer?

Administrators may want or need to remove the Quest Change Auditor Agent from a server but the Client Deployment tab displays the Agent is...

Revisado el: miércoles, 24 de agosto de 2022
4288633 - How to collect Logon and Authentication information

How to collect Logon and Authentication information

Revisado el: miércoles, 24 de agosto de 2022
4288287 - How to collect new created User Accounts on SQL Server

What type of events should be captured to collect new User Accounts being created on SQL Server ?

Revisado el: miércoles, 24 de agosto de 2022
4225710 - How to clear 'pending' state for Agent install?

Agent is not deployed and status is stuck in 'pending' state.

Revisado el: miércoles, 24 de agosto de 2022
4244408 - How to check oldest event in Database?

How to check oldest event in Database?

Revisado el: miércoles, 24 de agosto de 2022
4311382 - How to change user permissions how to had remove users from the built-in roles

We have the advertised security groups in AD, however there are no members present. I have access to Change Auditor myself but I cannot see any AD...

Revisado el: miércoles, 24 de agosto de 2022
4294312 - How to change the name of the Coordinator server

Are there any issues with changing the name of the coordinator server and ensuring communication with existing agents?

Revisado el: miércoles, 24 de agosto de 2022
4249263 - How to capture "Memory amount changed" events from DC's

How to capture "Memory amount changed" events from DC's

Revisado el: miércoles, 24 de agosto de 2022
4328414 - How to bypass the SCP discovery in the Change Auditor Client

Normally, the Change Auditor Service/Client will attempt to find all Service Connection Points (SCP) automatically inside an AD Forest. It is...

Revisado el: miércoles, 24 de agosto de 2022
4312769 - What queries does Change Auditor runs against the database?

What queries does Change Auditor runs against the database? 1. Stored procedures 2. Parameterized query 3. Dynamic query 4. Joined queries 5...

Revisado el: miércoles, 24 de agosto de 2022
4234939 - What ports does ChangeAuditor use to communicate

Administrators may need to know what ports are required to allow ChangeAuditor to function properly.

Revisado el: miércoles, 24 de agosto de 2022
4285216 - What ports do we need open in a firewall for change auditor to work?

With an active firewall connection between the SQL server and the Change Auditor Coordinator, the service will not start even though we have port...

Revisado el: miércoles, 24 de agosto de 2022
4281167 - What ports do we need open in a firewall for change auditor to work?

Service will not start with active Firewall between SQL Server and Coordinator, even though TCP Port 1433 is open.

Revisado el: miércoles, 24 de agosto de 2022
4249635 - What ports are required to run ChangeAuditor 6.x and 7.x Agents through a firewall?

What ports are required to run ChangeAuditor 6.x and 7.x Agents through a firewall?

Revisado el: miércoles, 24 de agosto de 2022
4273895 - What ports are required to be open to allow the deployment of the ARS integration scripts?

What ports are required to be open to allow the successful deployment of the ARS integration scripts between the Change Auditor coordinator server...

Revisado el: miércoles, 24 de agosto de 2022
4300160 - What permissions are required for SQL Data Level auditing?

What are the minimum permissions required for SQL Data Level auditing to take place?

Revisado el: miércoles, 24 de agosto de 2022
4225388 - What permissions are needed to run Change Auditor Powershell cmdlets?

When running the Powershell cmdlets, does the user need to be a member of the Change Auditor Administrators group?

Revisado el: miércoles, 24 de agosto de 2022
4318221 - What permission level below Domain Administrator can be used to deploy agents?

A company's security protocol prevents an administrator from using Domain Administrator level accounts as credentials for deploying agents when a...

Revisado el: miércoles, 24 de agosto de 2022
4314572 - What licensing is required to monitor Logon Activity

Administrators who are monitoring Logon Activity require additional licensing to enable the feature in Change Auditor 6.5 and higher. The Change...

Revisado el: miércoles, 24 de agosto de 2022
4236679 - What is the Threat Detection module?

Questions about the new Threat Detection feature

Revisado el: miércoles, 24 de agosto de 2022
4219337 - What is the Splunk Index used when creating the Splunk subscription?

When integrating Change Auditor with Splunk, what is the name if the Splunk Index that is used by the Subscription?

Revisado el: miércoles, 24 de agosto de 2022
4299621 - What is the size of an Event collected

What is the size of an event collected by Change Auditor in average?

Revisado el: miércoles, 24 de agosto de 2022
4280397 - What is the Quest Support Policy on Virtualizations?

When running Quest products in a largely virtualized environment how will this be supported?

Revisado el: miércoles, 24 de agosto de 2022
4312974 - What is the maximum supported size of the Change Auditor database?

What is the maximum database size supported by Change Auditor where it will continue to function normally?

Revisado el: miércoles, 24 de agosto de 2022
4230956 - What is the maximum Folder Path count supported in File System Template?

What is the maximum Folder Path count supported in the File System Template?

Revisado el: miércoles, 24 de agosto de 2022
4255473 - What is the impact on Change Auditor if the Exchange Scripting agent is temporary disabled?

An administrator is upgrading some Exchange server and plans to temporary disable the Exchange Scripting Agent, he needs to know how this will...

Revisado el: miércoles, 24 de agosto de 2022
4312969 - What is the impact if there is communication or network issues between Change Auditor services?

What will be the impact if there is no connection between Coordinator Server, Agent, Database server and Domain controller?

Revisado el: miércoles, 24 de agosto de 2022
4300356 - What is the exact queue size or buffer for Coordinators and CA agents?

We would like to know exact count or size of queue in Change Auditor where the Events are queued in Coordinators or the Client agents, in case of...

Revisado el: miércoles, 24 de agosto de 2022
4223377 - What is the difference between using the “Add” button or the “Add with events” button when creating a search?

In the search tabs, there are two options when specifying criteria.  Either "Add" or "Add with events".  Selecting these may produce different...

Revisado el: miércoles, 24 de agosto de 2022
4237241 - What is the difference between the NetApp Events "NetApp File Access Rights Changed" & "NetApp File Access Rights Changed (No From-Value)"?

What is the difference between the two groups of NetApp Events below that are shown in the NetApp Template NetApp File Access Rights Changed...

Revisado el: miércoles, 24 de agosto de 2022
4249502 - What is the difference between a logon event and the user session was started event?

What is the difference between a logon event and the user session was started event?

Revisado el: miércoles, 24 de agosto de 2022
4249330 - What is the behavior when adding multiple entries to the What tab?

When creating a search by adding multiple entries to the What tab, what is the expected results?

Revisado el: miércoles, 24 de agosto de 2022
4228079 - What is new in the ChangeAuditor 5.6 release

Revisado el: miércoles, 24 de agosto de 2022
4249491 - What is a File System Protection Template?

What is a File System Protection Template used for and how do you create one?

Revisado el: miércoles, 24 de agosto de 2022
4273498 - What happens to the Change Auditor Agent Events when the Coordinator goes offline?

What happens to the Change Auditor Agent Events when the Coordinator goes offline? If the Change Auditor Coordinator service is stopped on the...

Revisado el: miércoles, 24 de agosto de 2022
4306685 - What events are captured for Lync

1) Want to capture all events when changes are done in the Console 2) Want to capture conversations and video should be displayed who started that.

Revisado el: miércoles, 24 de agosto de 2022
4237820 - What events are recorded for "non-owner" access on Shared Mailboxes.

An administrator need to know the events that can be recorded for "non-owner" access on Shared Mailboxes.

Revisado el: miércoles, 24 de agosto de 2022
4224992 - What events and rules are included in the SCOM Management Pack?

Is there a list of the audit events and/or rules that are included in the SCOM Management Pack?

Revisado el: miércoles, 24 de agosto de 2022
4220780 - What events are audited from Azure AD and Office 365?

When auditing Azure AD and/or Office 365, what changes are audited?

Revisado el: miércoles, 24 de agosto de 2022
4219952 - What endpoints does Change Auditor use when integrated with On Demand Audit?

When configuring Change Auditor to integrate with On Demand Audit, what are the URLs (endpoints) that the Coordinator needs to be able to access?

Revisado el: miércoles, 24 de agosto de 2022
4225742 - What does the "Nested member added to group" event mean?

"Nested member added to group" and "Nested member removed from group" events are recorded with details similar to the following: What: Domain...

Revisado el: miércoles, 24 de agosto de 2022
4306611 - What does mean the setting option Agent Load Threshold

What does mean the setting option Agent Load Threshold in the Administration | Configuration | Agent | Configurations| System Settings

Revisado el: miércoles, 24 de agosto de 2022
4312784 - What do the "Topology Server Added" or "Topology Server Removed" events indicate?

When the Change Auditor 6.5 or 6.6 Coordinator is first installed in an environment, a large number of "Topology Server Added" events are recorded...

Revisado el: miércoles, 24 de agosto de 2022
4230889 - What changes are required after renaming the CA Coordinator and/or SQL server?

After a successful rename of the Change Auditor Coordinator and/or SQL server, reconfigure the Change Auditor Coordinator to connect using the new...

Revisado el: miércoles, 24 de agosto de 2022
4254115 - What Change Auditor events are recorded when a Domain Controller is promoted or demoted using DCPromo?

Administrators may want to know what events are recorded by Change Auditor when a Domain Controller is promoted or demoted using DCPromo.

Revisado el: miércoles, 24 de agosto de 2022
4249451 - What are the requirements for auditing Office 365 and Azure.

We would like to have auditing in both Office 365 and Azure. What is required?

Revisado el: miércoles, 24 de agosto de 2022
4284966 - What are the minimum SQL rights required to run Change Auditor?

The documents state the following permissions are required for Change Auditor, but what are the absolute minimum rights needed to run Change...

Revisado el: miércoles, 24 de agosto de 2022
4218697 - What are the best practices for Change Auditor?

What are the best practices that should be considered for a Change Auditor deployment?

Revisado el: miércoles, 24 de agosto de 2022
4236257 - What are some of the differences between On Demand Audit and Change Auditor?

What is the difference between Change Auditor and On Demand Audit to audit Azure and Office 365? If we already have Change Auditor licensed for...

Revisado el: miércoles, 24 de agosto de 2022
4300177 - What are Change Auditor additional settings required when using SQL Always On\ Multi-subnet Failover?

When using  SQL High availability technology other than clusters for CA backend database there are some basic settings required.

Revisado el: miércoles, 24 de agosto de 2022
4230817 - WebClient Supported Browsers

What browsers are supported by the ChangeAuditor WebClient?

Revisado el: miércoles, 24 de agosto de 2022
4273808 - Web Client Search Filter is Case Sensitive

In the Web Client Searches tab, when opening a search, when attempting to filter on one of the columns, the case needs to be typed exactly as the...

Revisado el: miércoles, 24 de agosto de 2022
4237246 - Web Client update failed with error "Failed to get the service address for the coordinator"

When upgrading the Change Auditor Web Client to a version prior to 6.9.5, the error  "Failed to get the service address for the coordinator" may...

Revisado el: miércoles, 24 de agosto de 2022
4230819 - Web Client site will not load due to "CSS was ignored due to mime type mismatch" error

Unable to connect to web client. The page will not load with Internet Explorer or other browsers such as Firefox. Internet Explorer Developer...

Revisado el: miércoles, 24 de agosto de 2022
4227902 - Web Client throws an error if user password contains < symbol

Consider the following scenario... 1. The user password contains < character and attempts to logon to the Web client 2. The user receives...

Revisado el: miércoles, 24 de agosto de 2022
4295135 - Web Client default view

When logging on to the ChangeAuditor WebClient is it possible to get directed to the search page instead of the overview page?.

Revisado el: miércoles, 24 de agosto de 2022
4288302 - Web client error 'No such host is known' when trying to create new public search or modify protection template

When attempting to create a new public search or modify a protection template in the web client the following error occurs: 'Error on request...

Revisado el: miércoles, 24 de agosto de 2022
4236776 - Web Client installer error, Access denied. User does not have the required permissions to perform the requested operation

During installation of the Change Auditor Web Client the user receives the following error: "Access denied. User does not have the required...

Revisado el: miércoles, 24 de agosto de 2022
4231137 - Web client configuration document is misleading when discussing coordinator ports

"Install web client" section has misleading and generally unnecessary section pertaining to hard-coding the Coordinator ports which many users do...

Revisado el: miércoles, 24 de agosto de 2022
4256804 - We are trying to find the attribute in CA that can audit when the email: field was changed

We are trying to find the attribute in CA that can audit when the email field was changed.

Revisado el: miércoles, 24 de agosto de 2022
4224848 - Warning in the Coordinator logs after upgrading to 7.2 - "Cannot find an agent with ID {GUID}"

After upgrading Change Auditor to 7.2, regardless if you upgrade the agent to 7.2 or the agents are on a supported down-leveled version (eg 7.1...

Revisado el: miércoles, 24 de agosto de 2022
4351265 - VMware events not reporting after disabling TLS 1.0 on the VMWare host

After disabling TLS 1.0 in the VMware environment, Change Auditor 6.9.x, 7.0 & 7.0.1 agents no longer seem to detect events from VMware.

Revisado el: miércoles, 24 de agosto de 2022
4236397 - VMware auditing template configuration

Revisado el: miércoles, 24 de agosto de 2022
4236846 - Visio file generates a file open event (option to suppress enabled) when file is selected in details view or displayed in contents view

When browsing a remote file-share with details or content view enabled from a machine with Office 2013 installed and clicking on a Visio (VSD type...

Revisado el: miércoles, 24 de agosto de 2022
4227815 - VIDEO - How to alert when a group membership changes in active directory

This video demonstrates how to alert when an Active Directory based group membership changes.

Revisado el: miércoles, 24 de agosto de 2022
4316271 - Variables not working when added to the CC or BCC lines of an alert email

Change Auditor has the ability to add the following three variables to the TO, CC, and BCC lines of an alert email: %WHO% %OWNER% %MANAGEDBY...

Revisado el: miércoles, 24 de agosto de 2022
4254687 - Variable added to the TO line of an Alert does not appear on the email sent to users

When an SMTP alert is configured to send to email addresses and a variable (such as %WHO%), the user that resolves to the variable is not listed...

Revisado el: miércoles, 24 de agosto de 2022
4236158 - Using multiple Coordinators

Is is possible to add a second or use multiple Coordinator in the same Forest?

Revisado el: miércoles, 24 de agosto de 2022
4330679 - Using a group as an administration account with a protection template

ChangeAuditor Protection template is using a distribution group as an administration account.

Revisado el: miércoles, 24 de agosto de 2022
4312863 - Users are unable to change their passwords when the Active Directory objects are Protected by Change Auditor

After configuring Change Auditor protection on a user object, the user is unable to update their password manually or when prompted by Windows.

Revisado el: miércoles, 24 de agosto de 2022
4294494 - UserMail and ADAM Instance Port columns not displayed when added to Search layout

After adding the attribute  UserMail  or  ADAM Instance Port  in the Search | Layout Once clicked on  Run , the column is not displayed

Revisado el: miércoles, 24 de agosto de 2022
4307958 - User name not displayed on Custom AD Object Monitoring events for groups

The Custom AD Object Monitoring facility shows both add/ delete events, but does not translate SIDs to readable names

Revisado el: miércoles, 24 de agosto de 2022
4224665 - User Object Creation shows Delete events.

Revisado el: miércoles, 24 de agosto de 2022
4228006 - User license count does not match the LDAP query referenced in Technical Insight Guide

The user license count returned does not match the LDAP query (below) from the Technical Insight Guide when executed in Active Directory...

Revisado el: miércoles, 24 de agosto de 2022
4255741 - User LastLogon Changed alert

User LastLogon Changed alert

Revisado el: miércoles, 24 de agosto de 2022
4249206 - User account lockouts are no longer being recorded by Change Auditor

An administrator noticed that "User account locked" events are no longer be recorded. 

Revisado el: miércoles, 24 de agosto de 2022
4237145 - User account creation and event consolidation

During account creation Change Auditor consolidates events in to one event "User Object Added". That means that any attributes added to the object...

Revisado el: miércoles, 24 de agosto de 2022
4328609 - Use elevated credentials in order to upgrade CA database.

Repository tries to upgrade the database but errors out due to access issues.

Revisado el: miércoles, 24 de agosto de 2022
4255375 - Use gMSA account for Shared Folder configuration?

We want to use a Group Managed Service Account for the shared folder access, but it does not accept these as credentials and will not allow you to...

Revisado el: miércoles, 24 de agosto de 2022
4235144 - Upgrading ChangeAuditor agents to version 6.5 fails

When upgrading domain controller agents from ChangeAuditor 5.8.67 to version 6.5 following error occurred: "Win32 error(25052) while deploying...

Revisado el: miércoles, 24 de agosto de 2022
4300505 - Upgrading 5.9 agents to 6.6 agents

After upgrade of the Coordinator and Client from 6.0 to 6.6 all of the agents are still on 5.9. Can they be upgraded directly to 6.6? During...

Revisado el: miércoles, 24 de agosto de 2022
4306695 - Upgrade to 6.9.4 fails with a message about can't connect to DB

When trying to upgrade to 6.9.4 the error "A network-related or instance-specific error occurred while establishing a connection to SQL Server. The...

Revisado el: miércoles, 24 de agosto de 2022
4288897 - Upgrade stopped progressing on "Quest-ChangeAuditor-Data.sql" script

The ChangeAuditor Client displays the "Quest-ChangeAuditor-Data-sql" script is at 60% and has not completed after several hours.

Revisado el: miércoles, 24 de agosto de 2022
4294225 - Upgrade of agent from 6.0 to 6.5 causes a reboot of server

The upgrade of agent from 6.0.181 to 6.5.183 causes a reboot of  server. Deployment Results show unable to complete remote procedure. Review of...

Revisado el: miércoles, 24 de agosto de 2022
4267271 - Upgrade InTrust plug-ins to ChangeAuditor

Revisado el: miércoles, 24 de agosto de 2022
4236433 - Upgrade may produce confusing error if specified account is not DBO on ChangeAuditor database

During upgrade of Change Auditor Coordinator the following error may occur: "Warning! A database with this name exists but it is not compatible...

Revisado el: miércoles, 24 de agosto de 2022
4292604 - Upgrade fail on database initialization when the CA database is configured with SQL Always On

Upgrade to 7.1.1 won't upgrade database schema and fail with error  - Database initialization not successful on ChangeAuditor. Value cannot be...

Revisado el: miércoles, 24 de agosto de 2022
4236612 - Upgrade does not preserve audit event class settings

Consider the following scenario... 1. Specific events have been disabled or enabled under via View | Administration | Auditing | Audit Events...

Revisado el: miércoles, 24 de agosto de 2022
4289898 - Unknown license type 16

The warning in the Coordinator log is: Level: WARN Thread: 5076 Logger: TorzagLib.Agent.CWcfCommunicator File: WcfCommunicator.cpp Function...

Revisado el: miércoles, 24 de agosto de 2022
4217739 - Unix attributes changes in Active Directory are not captured

Unix attributes changes in Active Directory are not captured when changes/additions are made.

Revisado el: miércoles, 24 de agosto de 2022
4217685 - Unix attributes changes in AD are not being captured by Change Auditor.

Unix attributes changes in AD are not being captured by Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4344549 - Uninstalling the Change Auditor Coordinator

I am in the process of uninstalling one of my Change Auditor Coordinators from my environment.  Can I just uninstall the software or should I shut...

Revisado el: miércoles, 24 de agosto de 2022
4249485 - Uninstalling a Change Auditor Agent does not result in a Change Auditor Agent uninstalled Fault Tolerance event being generated

When searching for events generated within the Fault Tolerance Facility, when an Agent is uninstalled there are no results being returned...

Revisado el: miércoles, 24 de agosto de 2022
4233634 - Uninstalled Agents are re-enumerated within Agent Statistic and Overview following a toplogy refresh

In 6.x when an Agent is set to 'Uninstalled' via 'Agent Statistics' screen it comes back with 'Inactive' status after topology refresh.

Revisado el: miércoles, 24 de agosto de 2022
4293964 - Unhandled exception occurs when verifying SharePoint credentials when completing the SharePoint Auditing template in Change Auditor Client window.

Attempting to verify SharePoint credentials when completing the Sharepoint Auditing template, an 'Object already exists.' Unhandled Exception is...

Revisado el: miércoles, 24 de agosto de 2022
4319472 - Unhanded exception after adding a new role to the Application User Interface.

An administrator gets the following error when trying to edit a role in the Application User Interface Immediately after adding the new role: An...

Revisado el: miércoles, 24 de agosto de 2022
4237631 - Unexpected file open events for NetApp auditing when browsing folders

We configured NetApp auditing for all events. When we're browsing the folder we're receiving alerts about opening all the files inside the folder...

Revisado el: miércoles, 24 de agosto de 2022
4219261 - Unexpected failed "Folder Open" events when a user expands a mapped drive which contains sub-folders they do not have access to

When a user expands a mapped drive in Windows File Explorer, CA logs failed Folder Open events due to NTFS Permissions for folders that the user...

Revisado el: miércoles, 24 de agosto de 2022
4233399 - Unable to upgrade a second Change Auditor coordinator to version 6.5

After the first coordinator server is successfully upgraded to version 6.5, the data-migration to the new ChangeAuditor database may still be...

Revisado el: miércoles, 24 de agosto de 2022
4235878 - Unable to uninstall / upgrade Change Auditor Agent with 1713 error code

Unable to uninstall or upgrade Change Auditor Agent with error code 1713. The following error can also be found written in the msi log file...

Revisado el: miércoles, 24 de agosto de 2022
4300389 - Unable to see more than one Office 365 Template

After creating more than one O365 Template , they all display under Administration Task | Auditing | Office 365 However after leaving the...

Revisado el: miércoles, 24 de agosto de 2022
4234828 - Unable to Save Microsoft Office files (docx and xlsx) if Rename File System protection is enabled

If only Rename File System protection is enabled, user will be able to read the Microsoft Office files (docx and xlsx) but and attempts to edit...

Revisado el: miércoles, 24 de agosto de 2022
4300186 - Unable to override reply emails for Alerts.

Contrary to the Change Auditor user guide the Reply To: address cannot be overridden using the Alert Custom Email dialog. Is ths expected behavior...

Revisado el: miércoles, 24 de agosto de 2022
4249228 - Is there a unique event for the Exchange Cmdlet Update-RollGroupMember

Is there a separate unique Exchange facility event for the Exchange Cmdlet "Update-RollGroupMember"?  

Revisado el: miércoles, 24 de agosto de 2022
4294682 - Is there a limit to how many Coordinator can be connected to a SQL Instance

How many Coordinators can be connected to a SQL Server ?

Revisado el: miércoles, 24 de agosto de 2022
4264565 - Is the time of events shown in reports and Searches local time or UTC time?

Is the time of the events in UTC (GMT) time or local time.

Revisado el: miércoles, 24 de agosto de 2022
4306086 - Is the creation of an Organizational Unit or users allowed within a protected OU?

Consider the scenario where a protection template locks down an Organizational Unit. Does protecting an OU prevent the creation of subordinate...

Revisado el: miércoles, 24 de agosto de 2022
4348912 - Is TCP port 8373 required to be open for deploying Azure/O365 auditing templates to agents?

I wish to customize the current port that the coordinator uses to communicate with the agents to deploy an Azure/O365 auditing template.  Currently...

Revisado el: miércoles, 24 de agosto de 2022
4218774 - Is RC4 required to be enabled on a server with a Change Auditor Coordinator and/or agent?

Disabling RC4 is causing the Change Auditor service to stop and display event logs messages related to authentication. Is it mandatory to have this...

Revisado el: miércoles, 24 de agosto de 2022
4319039 - Is possible to change the type of events that is shown as "NONE" on the “Count of Events By results” Widget

Is possible to change the type of events that is shown as "NONE" on the “Count of Events By results” Widget  in the Change Auditor WebClient? 

Revisado el: miércoles, 24 de agosto de 2022
4306941 - Is OneDrive for Business supported?

If OneDrive for Business auditing is required, Change Auditor can collect those information as part of the Change Auditor for SharePoint...

Revisado el: miércoles, 24 de agosto de 2022
4229189 - Is Microsoft Windows Server 2012 R2 Supported by ChangeAuditor 6.0?

Does ChangeAuditor 6.0 currently support Microsoft Windows Server 2012 R2?

Revisado el: miércoles, 24 de agosto de 2022
4255405 - Is it supported to install Change Auditor components in IaaS such as AWS or Azure

Can the CA components (coordinator, client, database, agents) be installed on VMs running in Infrastructure as a Service (IaaS) such as  Amazon Web...

Revisado el: miércoles, 24 de agosto de 2022
4219078 - Is it supported giving access to the Change Auditor database from SQL Server?

Does Quest support giving database access to an account directly from SQL Server Security and not from the Change Auditor Client?

Revisado el: miércoles, 24 de agosto de 2022
4300014 - Is it possible to user Windows Account for SQL Server connection from Coordinator in an UnTrusted Forest

When setting up the Coordinator to SQL Server connection there are 2 options: Windows Authentication SQL Server Authentication When...

Revisado el: miércoles, 24 de agosto de 2022
4220833 - Is it possible to view all currently enabled Alerts, including bot Public and Private?

In Change Auditor 6.0, viewing Private searches which are enabled for Alerts is not easy.  There is not GUI interface to view this, unlike 6.5...

Revisado el: miércoles, 24 de agosto de 2022
4233637 - Is it possible to run a search for recipients of sent alerts

Revisado el: miércoles, 24 de agosto de 2022
4232384 - Is it possible to receive an email notifications when a large amount of files or folders are changed by a specific user in a short amount of time?

An administrator need to be notified when a single user makes a large amount of file or folder changes in given time. An example of the required...

Revisado el: miércoles, 24 de agosto de 2022
4351399 - Is it possible to protect computer objects from create/delete and enable/disable in certain OUs in CAAD?

Is there a way to use a protection template to protect computer objects from create/delete and enable/disable in certain OUs in CAAD?

Revisado el: miércoles, 24 de agosto de 2022
4306651 - Is it possible to perform an archive of the Change Auditor database directly to a remote location

Is it possible to perform an archive of the Change Auditor database directly to a remote location i.e: remote file share or NAS share

Revisado el: miércoles, 24 de agosto de 2022
4236646 - Is it possible to monitor a sub directory for a set of auditing tasks while also monitoring every other directory under the root for a different set of auditing tasks?

Consider the following: A File System Auditing Template is configured to audit C:\Windows (this object and all child objects) for file and folder...

Revisado el: miércoles, 24 de agosto de 2022
4236389 - Is it possible to load balance NetApp auditing across multiple ChangeAuditor Agents

What is the procedure for load balancing Netapp auditing across multiple ChangeAuditor Agents

Revisado el: miércoles, 24 de agosto de 2022
4282486 - Is it possible to limit the size of the Change Auditor Agent Local Database?

Is it possible to limit the size of the Change Auditor Agent Local Database (local cache) in order to reduce the footprint?

Revisado el: miércoles, 24 de agosto de 2022
4225269 - Is it possible to limit the size of the Change Auditor Agent database?

The Change Auditor Agent is capable of storing unsent events locally, so that in the event that the Change Auditor Coordinator server is offline...

Revisado el: miércoles, 24 de agosto de 2022
4348960 - Is it possible to import a list of users or groups to be monitored by a search?

Is it possible to import a list of users or groups to be monitored by a search from a CSV or TXT file?

Revisado el: miércoles, 24 de agosto de 2022
4294373 - Is it possible to have the Agent locked by password to prevent users from disabling or uninstalling it?

Is it possible to increase security by adding a password to prevent users from uninstalling or disabling the Change Auditor Agent ?

Revisado el: miércoles, 24 de agosto de 2022
4256811 - Incorrect IP shows for the Agent in the Deployment section

My coordinator shows an incorrect IP for a DC in the Deployment section of the Change Auditor client.

Revisado el: miércoles, 24 de agosto de 2022
4236219 - Incorrect coordinator status is reported in CA Client

The Coordinator status shows as Active but the Coordinator service is not running.

Revisado el: miércoles, 24 de agosto de 2022
4219726 - Incorrect "failed folder access" event generated when access is denied to a file and it is opened

When FULL DENY is explicitly set for a file in a folder in Windows 2008 R2 and the file is opened by the user, two events are recorded by Change...

Revisado el: miércoles, 24 de agosto de 2022
4300236 - In place upgrade of 5.x Archive Database to 6.5 Failed

After ChangeAuditor 6.5 upgrade, when attempting to connect to the archive databases the error "Database upgrade Failed" is received. 

Revisado el: miércoles, 24 de agosto de 2022
4319181 - In a Multi-Forest Configuration, alerts being sent from Coordination(s) in a different forest which does not have SMTP access

In a Multi-Forest Configuration, an administrator observed, alerts being sent from Coordination(s) in a different Forest where SMTP access is not...

Revisado el: miércoles, 24 de agosto de 2022
4306489 - Impossible to update password in Coordinator Configuration

When attempting to change the account/password to connect to SQL in the Coordinator Configuration , an error message is shown. Any further...

Revisado el: miércoles, 24 de agosto de 2022
4236142 - Importing a large number of objects into a search in the web client may fail with error, "The JSON request was too large to be serialized."

When importing a large number of objects into a search in the web client may fail with error, "The JSON request was too large to be serialized...

Revisado el: miércoles, 24 de agosto de 2022
4223823 - Impact of CVE-2022-22965 SpringShell/Spring4Shell vulnerability

A critical vulnerability was recently discovered related to systems/software that run the Spring Framework. More information about this...

Revisado el: miércoles, 24 de agosto de 2022
4237907 - Impact of CVE-2021-44228 Apache Log4j Vulnerability

A critical vulnerability was recently discovered related to systems/software that run Apache Log4j . More information about this vulnerability...

Revisado el: miércoles, 24 de agosto de 2022
4318114 - IIS Outlook Web Access may crash with Change Auditor agent installed on Exchange 2013

When the Change Auditor agent is installed on Exchange 2013, if there is a heavy Outlook Web Access load, IIS OWA process may crash. In addition...

Revisado el: miércoles, 24 de agosto de 2022
4344471 - Identifying/Halting Alerts in Private Folders

A former user set up alerts/searches under their private folder and the user account has been deleted/inaccessible, the alert is still active and...

Revisado el: miércoles, 24 de agosto de 2022
4344501 - I would like to redirect the default website on IIS to the Change Auditor Web-Client application

I have installed the Web Client for Change Auditor into the Default Web Site. Is there any way to redirect "http://<servername> to http://<server...

Revisado el: miércoles, 24 de agosto de 2022
4346907 - I want to setup a report to show all failed SMTP alerts

Most SMTP alert emails send normally and are received, but I have missed a few and I would like to know why.

Revisado el: miércoles, 24 de agosto de 2022
4344482 - I would like to create an alert for when any sort group nesting occurs.

I'd like to create an alert for when any sort group nesting occurs.

Revisado el: miércoles, 24 de agosto de 2022
4351241 - I want to better understand the "Primary Server Changed" DNS event

I see multiple events that show "Primary Server Changed" How is this being determined? I have found and entry in the event reference guide, but the...

Revisado el: miércoles, 24 de agosto de 2022
4346813 - I manually installed my Agent into a Change Auditor installation name that doesn't exist, how can I change this?

I manually deployed agents in my environment using command line switches and used an incorrect parameter for the Installation Name, is there any...

Revisado el: miércoles, 24 de agosto de 2022
4313125 - Hyper-V Threat Detection template will not deploy

When deploying Hyper-V Threat Detection, the following error may appear: INFO: Please wait while the Hyper-V virtual machine is deployed. This...

Revisado el: miércoles, 24 de agosto de 2022
4311365 - HSTS Missing From HTTPS Server

Our security team found the vulnerability "HSTS Missing From HTTPS Server" on Port 9000 on Quest Change Auditor Coordinator machine. How can this...

Revisado el: miércoles, 24 de agosto de 2022
4319429 - How will auditing "By Owner" mailbox events impact out environment?

What is the possible impact on an environment of enabling “By Owner" Mailbox audit events?

Revisado el: miércoles, 24 de agosto de 2022
4250495 - How to view the number of licenses used by ChangeAuditor

Administrators may want to compare the number of licenses added versus the number of licenses used by ChangeAuditor.

Revisado el: miércoles, 24 de agosto de 2022
4273831 - How to View an Agent deployment in ChangeAuditor Logs

When deploying Agents from the ChangeAuditor Client Deployment page, where and what is logged for this process?

Revisado el: miércoles, 24 de agosto de 2022
4306780 - How to use Group Membership Expansion for group whose membership is dynamic.

New group members are not being excluded from auditing when the group they are now a member of is selected in a search query.

Revisado el: miércoles, 24 de agosto de 2022
4234317 - How to upgrade to Change Auditor 6.9.x

In the video below we go over steps to upgrade Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4243591 - How to upgrade Change Auditor

How do you upgrade Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4346871 - How to update the Change Auditor installation name.

Is it possible to update the Change Auditor installation name, once the installation is completed and has been running.

Revisado el: miércoles, 24 de agosto de 2022
4249671 - How to update the ChangeAuditor Web Client so it points to the correct Change Auditor Coordinator and Port

How to update the ChangeAuditor Web Client to configure it connect to correct Change Auditor Coordinator and Port.

Revisado el: miércoles, 24 de agosto de 2022
4224173 - How to uninstall Changeauditor

What are the steps for uninstalling Change Auditor?

Revisado el: miércoles, 24 de agosto de 2022
4269674 - how to Uninstall Agent via Command line without MSI file

If you used a script to automatically push the CA agent to machines when they are added to OUs in AD, sometimes when the Server is moved the Agent...

Revisado el: miércoles, 24 de agosto de 2022
4312831 - How to troubleshoot intermittent email alerts that are not received

When email (SMTP) alerts are intermittently not received by the intended recipients, how can administrators troubleshoot if the alerts were sent...

Revisado el: miércoles, 24 de agosto de 2022
4316294 - How to track changes on an Active Directory Container object

 Active Directory Container objects are not monitored by default in Change Auditor for Active Directory, this schema class must be manually enabled.

Revisado el: miércoles, 24 de agosto de 2022
4307126 - How to track automatically events like failed Alerts or Reports

When creating Searches with Alerts or Reports , it is helpful to have reports showing if those Tasks completed successfully or failed...

Revisado el: miércoles, 24 de agosto de 2022
4277845 - How to Test & Diagnose problems with SNMP Alerts

This document provides additional steps for testing and diagnosing problems with SNMP alerts This work in conjunction with the test available...

Revisado el: miércoles, 24 de agosto de 2022
4316478 - How to subscribe to RSS Feeds/Product Notifications

How to subscribe to RSS Feeds/Product Notifications to o pt into support notifications to receive emails about the latest software patches...

Revisado el: miércoles, 24 de agosto de 2022
4294805 - How to setup File Protection for Change Auditor

How to setup File Protection for Change Auditor 7.x

Revisado el: miércoles, 24 de agosto de 2022
4288712 - How to setup Change Auditor Coordinator for Multiple domain in one Forest

In the scenario where one Forest with several Sub Domains where Policy prevent adding Coordinator servers to the Root Domain , which Admin...

Revisado el: miércoles, 24 de agosto de 2022
4229651 - How to setup auditing for Windows File Servers

In the video below we go over the steps to setup auditing for Windows File Servers

Revisado el: miércoles, 24 de agosto de 2022
4348854 - How to setup an Alert Enabled Search

I want to set up a search to be alert enabled

Revisado el: miércoles, 24 de agosto de 2022
4317934 - How to setup and configure SNMP alerts in ChangeAuditor

The ChangeAuditor Coordinator server can be configured to send SNMP alerts to third-party SNMP software installed on a separate server.

Revisado el: miércoles, 24 de agosto de 2022
4306752 - How to setup an alert for AD Queries when Elapsed value is above a certain threshold

How to setup an alert for AD Queries Performed when Elapsed value is above a certain threshold

Revisado el: miércoles, 24 de agosto de 2022
4300443 - How To Set Up an HTTPS Service for Web Client in IIS

As an administrator need to know how to enable HTTPS service for Change Auditor Web Client.

Revisado el: miércoles, 24 de agosto de 2022
4269620 - How to set up AD protection to Prevent DNS Zones being added or Deleted

How to set up AD protection to Prevent DNS Zones being added or Deleted

Revisado el: miércoles, 24 de agosto de 2022
4228054 - How to set deleted servers as uninstalled in Change Auditor

A Member Server/Domain Controller running the Change Auditor Agent service was removed from the environment/Domain/Network but the Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4282286 - How to sent an alert to just "Manged By" User of a group Change

When a change is made to Group membership, an alert may be required to sent just to the User that manages that Group. Rather than typing in the...

Revisado el: miércoles, 24 de agosto de 2022
4294272 - How to select the filer when creating a NetApp template for cluster mode?

When creating a NetApp auditing template, the user guide instructs the administrator to select the NetApp filer from the drop-down. Or enter the...

Revisado el: miércoles, 24 de agosto de 2022
4292323 - How to see custom Active Directory auditing for Adams LDS?

Change Auditor for Active Directory components and features

Revisado el: miércoles, 24 de agosto de 2022
4306441 - How to search on changes to a specific user object.

How to create a search for changes to a specific user object.

Revisado el: miércoles, 24 de agosto de 2022
4236450 - How to search on changes to user objects located in a specific OU

How to create a search for changes to user objects which reside in a specific OU.

Revisado el: miércoles, 24 de agosto de 2022
4346809 - How to Search What Details (Object Name) in Archive Databases

When trying to search for User Objects or Group Objects under the What tab on archive databases, the AD picker is not available or Subsystem is...

Revisado el: miércoles, 24 de agosto de 2022
4250481 - How to Search for events where the user object attribute value is <Not set> in the To: field

Administrators may want to Search for ChangeAuditor events where the Active Directory user attribute value is in the To: field indicating that the...

Revisado el: miércoles, 24 de agosto de 2022
4227803 - How to search for file system events within a specific folder structure

How to search for file system events within a specific folder structure.

Revisado el: miércoles, 24 de agosto de 2022
4220694 - How to search for specific file system event(s)

How to search for specific file system event(s)

Revisado el: miércoles, 24 de agosto de 2022
4316324 - How to Search for events for specific Exchange mailbox

How to Search for owner and non-owner Change Auditor for Exchange events such as read email and deleted email for a specific mailbox.

Revisado el: miércoles, 24 de agosto de 2022
4262685 - How to search for events from a Change Auditor agent that was removed from Active Directroy

Are administrators able to search for and view events from a Change Auditor agent that was removed?

Revisado el: miércoles, 24 de agosto de 2022
4255611 - How to search for events for accounts that match a naming convention

How to search for events for accounts that all match a certain naming convention

Revisado el: miércoles, 24 de agosto de 2022
4254627 - How to search for changes to objects in a different domain than the ChangeAuditor Coordinator

An administrator may what to search for changes to objects in the same forest but different domain than the ChangeAuditor Coordinator. However...

Revisado el: miércoles, 24 de agosto de 2022
4230974 - How to search for changes to objects which reside in a  specific OU

There exists a requirement to search for changes to objects which reside in a specific OU.

Revisado el: miércoles, 24 de agosto de 2022
4212237 - How to search for changes from specific servers

Revisado el: miércoles, 24 de agosto de 2022
4320039 - How to search for "User" objects deleted events in Active Directory?

How to search for user deleted events in Active Directory.

Revisado el: miércoles, 24 de agosto de 2022
4317895 - How to search ChangeAuditor for actions performed on a particular Active Directory Group

Administrators may want to search ChangeAuditor for actions performed on an Active Directory group.

Revisado el: miércoles, 24 de agosto de 2022
4236112 - How to rollback an upgrade

How do you perform a rollback of a Change Auditor upgrade?

Revisado el: miércoles, 24 de agosto de 2022
4234407 - How to return the count of events by agent for a specific date range

Is there a way to return the number of events (just the count and not the event details) per agent for a specific date range?

Revisado el: miércoles, 24 de agosto de 2022
4306271 - How to restrict excessive events from being auditing on specific agents.

When using for example, the Logon Activity User module to capture domain user logons from all workstations, and the Event Class "User performed a...

Revisado el: miércoles, 24 de agosto de 2022
4288500 - How to restrict a DNS Events search to only static DNS A records

Would like to restrict the search results to only static DNS A record events.

Revisado el: miércoles, 24 de agosto de 2022
4224390 - How to restore the default searches.

Need to find out how to restore the default searches.

Revisado el: miércoles, 24 de agosto de 2022
4233455 - How to report on what account was used to enable user objects and when?

How to report on when a user account was enabled and which account performed the action

Revisado el: miércoles, 24 de agosto de 2022
4255416 - How to report on all AD events?

Is there a way to export all the active directory events via the Change Auditor Client?

Revisado el: miércoles, 24 de agosto de 2022
4300219 - How to remove the Quest ChangeAuditor Agent from servers without the installer file?

The ChangeAuditor Coordinator has been uninstalled but the ChangeAuditor Agents have not been uninstalled from the Domain Controllers or member...

Revisado el: miércoles, 24 de agosto de 2022
4224830 - How to remove Change Auditor licenses

Administrators may need to remove licenses from a ChangeAuditor installation becuase the functionality is no longer required or because the...

Revisado el: miércoles, 24 de agosto de 2022
4313541 - Port 9000

Does Change Auditor utilize port 9000 in anyway? Seeing this port used quite a few times.

Revisado el: miércoles, 24 de agosto de 2022
4309096 - Permissions required to display initiator account in Change Auditor

What rights does the GPOAdmin service account need to display the initiator account (GPOAdmin and Change Auditor Integration) in Change Auditor?

Revisado el: miércoles, 24 de agosto de 2022
4300075 - Permission of ChangeAuditor Operators not work until the IIS server restart

Account added added to the  Change Auditor Operators group cannot login unless the IIS Service been restarted. The following error is shown...

Revisado el: miércoles, 24 de agosto de 2022
4249350 - Permissioning an AD group to a role in the Application User Interface does not work

You are able to successfully permission a user to a role in the Application User Interface but when you permission a groupto the same role, the CA...

Revisado el: miércoles, 24 de agosto de 2022
4254770 - Permission changes to Exchange mailbox database object in Active Directroy not captured by the Agent on the Domain Controller

When a Change Auditor Agent with Exchange Licensing is installed on a Domain Controller (DC), permission changes to Exchange mailbox database...

Revisado el: miércoles, 24 de agosto de 2022
4294493 - Permission Changes at the Domain/Forest level

Need to see the permission changes for when a user is added for delegation at the Domain/Forest level

Revisado el: miércoles, 24 de agosto de 2022
4285164 - Performance issues with SQL Database

DB performance issue causing delayed receive of events and very slow searches.

Revisado el: miércoles, 24 de agosto de 2022
4227961 - AzureAD Auditor Event Collector failed while getting AuditEvent report, The remote server returned an error: (403) Forbidden

After creating Office 365 Exchange Online or Azure AD template using existing web application, no events are received and the following error can...

Revisado el: miércoles, 24 de agosto de 2022
4297736 - Azure Sentinel for Change Auditor 7.1

Is Azure Sentinel supported with Change Auditor?

Revisado el: miércoles, 24 de agosto de 2022
4349052 - Azure AD users UPN is getting cached by the Change Auditor Agent

When an Azure AD user is created with a temporary UPN (due to duplicates or other reasons), or the UPN gets changed, it looks like Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4305561 - Azure Agent http 400 error, Azure AD collectors hang on repeating failures due to expired skip tokens

Azure AD collectors hang on repeating failures due to expired skip tokens Azure Agent had temporary data loss and threw HTTP/400 errors

Revisado el: miércoles, 24 de agosto de 2022
4349063 - Azure AD or O365 audit event collection or OnDeman connections may fail if the agent server is not using TLS 1.2

The creation of the Azure AD or O365 audit template is successful, however no audit events are returned. 

Revisado el: miércoles, 24 de agosto de 2022
4236248 - Azure AD events may be delayed temporarily if the agent service is not restarted after updating the web application permissions to support MS Graph API

If manually updating the web application permissions following an upgrade from 7.0.3 (or earlier) to 7.0.4 (or later) Azure AD events may be...

Revisado el: miércoles, 24 de agosto de 2022
4233603 - Azure Active Directory template error, "Failed to verify user. Accounts requiring multi-factor authentication cannot be used"

When running the New-CAAzureADTemplateUsingCreds.ps1 the following error is reported when attempting to configure the tenant: "Failed to verify...

Revisado el: miércoles, 24 de agosto de 2022
4227945 - Azure Active Directory sign in risk events not shown following an upgrade to 6.9.4 or higher

Change Auditor has been upgraded to its latest version and sign-in risk events are not shown.

Revisado el: miércoles, 24 de agosto de 2022
4344553 - Automate export of Searches and Configuration

I am looking to automate and schedule the export of Searches and Configuration for disaster recovery purposes. Is this possible or does it have to...

Revisado el: miércoles, 24 de agosto de 2022
4344380 - Auditing Sharepoint Online: Site creation; Site list Creation/Deletion

ChangeAuditor doesnt pickup Sharepoint Online - Site Creation/Deletion ; Site List Creation/Deletion.

Revisado el: miércoles, 24 de agosto de 2022
4319137 - Auditing stopped in other forest after upgrading a separate domain/forest in a multi-forest configuration

An administrator observed that monitoring stopped in other forest after upgrading the Coordinator and Client in a separate Domain/Forest

Revisado el: miércoles, 24 de agosto de 2022
4314294 - Auditing the ms-Mcs-AdmPwd AD attribute displays its password value data in the Change Auditor audit records

If LAPS (Local Administrator Password Solution) has been installed in an Active Directory domain and the ms-Mcs-AdmPwd attribute has been enabled...

Revisado el: miércoles, 24 de agosto de 2022
4278389 - Auditing Page Active Directory Auditing scope

Auditing page Active Directory tab Auditing scope The Enterprise object in the Auditing | Active Directory section under the Administration Task...

Revisado el: miércoles, 24 de agosto de 2022
4289076 - Audited events show time as being in the future.

Events are being audited that have their Time Stamp as being in the future. This is producing inaccurate reports.

Revisado el: miércoles, 24 de agosto de 2022
4238664 - Audit the total number of email sent and received

Can Change Auditor for Exchange (CA EX) audit and capture the total email sent and received of a user account?

Revisado el: miércoles, 24 de agosto de 2022
4220140 - Auditing and Protection of NinjaCopy activity against the Active Directory database (NTDS.dit) is not working after NTDS.dit is moved until Change Auditor agent is restarted

If a user uses a maintenance utility such as NTDSUtil.exe to move the Active Directory database to different location, then Change Auditor will...

Revisado el: miércoles, 24 de agosto de 2022
4349075 - Audit Network Share Creation, Alterations and Deletions in Change Auditor

You want to audit who creates, alters or deletes network shares in your environment

Revisado el: miércoles, 24 de agosto de 2022
4255340 - Audit security groups in Active Directory to determine unused groups?

Can Change Auditor audit group’s activity in Active Directory and File Servers, to determine what groups are being used, so the unused ones can be...

Revisado el: miércoles, 24 de agosto de 2022
4314463 - Audit DFS changes in Active Directory

DFS changes not showing up in Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4233679 - Audit configuration changes to time service settings

Can Change Auditor audit changes to time service settings?

Revisado el: miércoles, 24 de agosto de 2022
4306630 - Attempting to scan SharePoint topology 'Object already exists.' Unhandled Exception is received and Client crashes.

When creating a template to audit a SharePoint farm,  the client crashes after attempting to scan the SharePoint topology. The Unhandled Exception...

Revisado el: miércoles, 24 de agosto de 2022
4255401 - Attempting to stop Change Auditor agent on a Domain Controller may result in blue screen

Attempting to stop Change Auditor agent service on a Domain Controller may result in blue screen. The memory dump may have analysis result...

Revisado el: miércoles, 24 de agosto de 2022
4292298 - Assistance w/Reports

General description of how to configure AD reports and customize queries.

Revisado el: miércoles, 24 de agosto de 2022
4249430 - How to Purge specific events from the database

Can the Change Auditor Purge process be configured to delete specific events such as,"Computer ServicePrincipalName Changed" from the database?

Revisado el: miércoles, 24 de agosto de 2022
4249211 - How to Publish Change Auditor Reports to SQL Reporting Services

Can Change Auditor Reports be published to SQL Reporting Services?  There may still be a requirement to allow users to get scheduled reports from...

Revisado el: miércoles, 24 de agosto de 2022
4231058 - How to publish ChangeAuditor searches for reporting\scheduling from SQL Reporting Services

How to publish a ChangeAuditor search to SQL Reporting Services.

Revisado el: miércoles, 24 de agosto de 2022
4255592 - How to proactively renew Change Auditor certificate used for On Demand Audit integration

Upon the initial upgrade to 7.0.3 (or higher) version, Change Auditor coordinator creates a certificate on the local machine to facilitate event...

Revisado el: miércoles, 24 de agosto de 2022
4220809 - How to process a agent database

An agent database that contains events that need to be processed.

Revisado el: miércoles, 24 de agosto de 2022
4255621 - How to prevent a group's members from being modified?

How to create an AD Protection Template to prevent a group from having is members modified (add or delete).

Revisado el: miércoles, 24 de agosto de 2022
4300364 - How to prepare for recovery of a Change Auditor for Active Directory installation?

How to prepare for recovery of a Change Auditor for Active Directory installation  in case of total loss of server hosting the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4219295 - How to override the assigned coordinator SCP ports when specific ports are required

Change Auditor uses dynamically assigned ports by default. The ports will be dynamically assigned during coordinator installation and then those...

Revisado el: miércoles, 24 de agosto de 2022
4317402 - How to obtain a Section 508 compliance statement for Quest Products

How to obtain a Section 508 compliance statement for Quest Products.

Revisado el: miércoles, 24 de agosto de 2022
4250290 - How to move the Service Principal Name (SPN) from Computer Object to a Domain User

By default, the Change Auditor Coordinator service runs as "Local System". Administrators may want to run the ChangeAuditor service as a Domain...

Revisado el: miércoles, 24 de agosto de 2022
4249383 - How to move the Change Auditor database to a new SQL server

What are the steps to move the Change Auditor database to a new SQL server?

Revisado el: miércoles, 24 de agosto de 2022
4235918 - How to move the ChangeAuditor Coordinator/Server to another Windows Server

Administrators may want to move the existing ChangeAuditor Coordinator to another server.

Revisado el: miércoles, 24 de agosto de 2022
4294499 - How to Monitor specific GPO

How to monitor a specific GPO  monitoring in Change Auditor  via Reports  and Alerts

Revisado el: miércoles, 24 de agosto de 2022
4224411 - How to monitor changes to Certificate Templates

Revisado el: miércoles, 24 de agosto de 2022
4232409 - How to monitor attributes on AD objects, like ServicePrincipalName

How to monitor attributes on AD objects, like ServicePrincipalName with Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4288556 - How to modify the NetApp fpolicy send buffer size value

Per Netapp Best Practices guidelines: https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_calculate_send...

Revisado el: miércoles, 24 de agosto de 2022
4231111 - How to modify the scheduled report zip limit

Report delivery automatically compresses the report when is it larger than 1 MB. Is there any method to increase the threshold when this occurs?

Revisado el: miércoles, 24 de agosto de 2022
4307990 - How to Migrate Change Auditor Settings from One Database to Another

At times, there may be issues with the current Change Auditor database (corruption, size, permissions, etc), and the current database may need...

Revisado el: miércoles, 24 de agosto de 2022
4237462 - How to merge license files together, or request a new or updated license

How to merge license files together, or request a new or updated license, for a Quest product you are currently licensed for.

Revisado el: miércoles, 24 de agosto de 2022
4223374 - How to manually install the Change Auditor Agent on a remote server

There are a number of circumstances which may lead to needing to manually installing the Change Auditor Agent on a remote server  including, but...

Revisado el: miércoles, 24 de agosto de 2022
4223360 - How to manually enable or disable the Software Improvement Program.

Is there a way to manually enable or disable the Software Improvement Program pop up for users of the Change Auditor Client?

Revisado el: miércoles, 24 de agosto de 2022
4236436 - How to investigate Change Auditor Agent high memory usage using User Mode Stack Trace Database

How to investigate Change Auditor Agent high memory using User Mode Stack Trace Database when instructed by Support.

Revisado el: miércoles, 24 de agosto de 2022
4312104 - How to integrate Change Auditor with Elastic search (ELK)

Looking for information on how to send Change Auditor event to ELK. I found some documentation regarding SEIM but couldn't find anything on ELK...

Revisado el: miércoles, 24 de agosto de 2022
4351273 - How to install the Coordinator via command line

How to install the Coordinator via the command line 

Revisado el: miércoles, 24 de agosto de 2022
4236954 - How to install the agent on Exchange servers?

What is required when installing agents on the Exchange servers?

Revisado el: miércoles, 24 de agosto de 2022
4249458 - How to install or uninstall the agent

How do you install or remove the Change Auditor agent?

Revisado el: miércoles, 24 de agosto de 2022
4294365 - How to install 6.x agent on a Windows Server 2008 R2 Server Core, remotely via Powershell remoting?

How to install 6.x agent on a Windows Server  2008 R2 Server Core, remotely via Powershell remoting?

Revisado el: miércoles, 24 de agosto de 2022
4238066 - How to include or exclude file or folder paths from a File System Auditing template

How can file and folder paths that match a pattern be included or excluded from the auditing template

Revisado el: miércoles, 24 de agosto de 2022
4346742 - How to import the Change Auditor PowerShell Module

How to import the Change Auditor PowerShell module?

Revisado el: miércoles, 24 de agosto de 2022
4294216 - How to identify shared mailboxes in Exchange Mailbox auditing?

How to identify shared mailboxes and audit them?

Revisado el: miércoles, 24 de agosto de 2022
4234887 - How to get the Change Auditor client logs

The Change Auditor client keeps a log file of its actions which can be reviewed if needed. The log files can be accessed from within the Change...

Revisado el: miércoles, 24 de agosto de 2022
4234942 - How to get more information from a Web Client upgrade installer failure

In some situations, The web client upgrade for Change Auditor may fail, resulting with error messages that exit the installer

Revisado el: miércoles, 24 de agosto de 2022
4237616 - How to get a product Walkthrough or Demo

How to get a product Walkthrough or Demo

Revisado el: miércoles, 24 de agosto de 2022
4234463 - How to force the agent to use a specific Coordinator

An Administrator needs to force the Agent to connect to only one designated Coordinator in their Active Directory Forest .

Revisado el: miércoles, 24 de agosto de 2022
4300418 - How to find the total amount of Events per Type

As finding the total amount of Events per Type can be long and complicated in the Change Auditor Client , can this be done from SQL Server...

Revisado el: miércoles, 24 de agosto de 2022
4276188 - How to find the SQL query a Change Auditor search is using to search the Change Auditor SQL database?

Administrators may want to know the exact SQL Query used by a Change Auditor Search to query the Change Auditor database.

Revisado el: miércoles, 24 de agosto de 2022
4306822 - How to find the Coordinators Agents are connected to?

How can I find which Coordinators my Agents will connect to even in the case of Windows  Core Server Agents ?

Revisado el: miércoles, 24 de agosto de 2022
4219423 - How to find out who is deleting Active Directory Users

Need to determine who is deleting accounts in Active Directory.

Revisado el: miércoles, 24 de agosto de 2022
4210077 - How to find ChangeAuditor license information

Revisado el: miércoles, 24 de agosto de 2022
4254706 - How to filter Change Auditor Events to ensure only failed events are displayed

Administrators may want to filter Events recorded by Change Auditor to view only events that have a "Failed" result.

Revisado el: miércoles, 24 de agosto de 2022
4329668 - How to extract a summary of all custom searches showing WHAT,WHO and other tabs filter criteria?

Need to run a summary report or table of all custom searches that will provide filter criteria in WHAT,WHO and other TABS.

Revisado el: miércoles, 24 de agosto de 2022
4255605 - How to export the Change Auditor configuration

How to export the Change Auditor configuration to allow it to be re-imported into a newly installed Change Auditor instance / database...

Revisado el: miércoles, 24 de agosto de 2022
4219569 - How to export the ChangeAuditor searches and re-import it to a new database

How to export the ChangeAuditor searches so they can be re-imported into a newly installed ChangeAuditor instance / database?

Revisado el: miércoles, 24 de agosto de 2022
4254488 - How to export Search results to a file

How to export the current results of a search to a file rather than running a scheduled report.

Revisado el: miércoles, 24 de agosto de 2022
4314707 - How to Export Change Auditor Report Layouts

Administrators may want to export Report Layouts as a backup or to import into other ChangeAuditor servers.

Revisado el: miércoles, 24 de agosto de 2022
4250513 - How to Export and Import the Change Auditor Configuration and Searches

Video solution discussing how to Export and Import the Change Auditor Configuration and Searches using the Change Auditor Client.

Revisado el: miércoles, 24 de agosto de 2022
4232433 - How to exclude workstations from the topology scan in Change Auditor 6.9+

Change Auditor 6.9+ includes a new feature for excluding Workstations from the topology scan This feature is not covered in the product...

Revisado el: miércoles, 24 de agosto de 2022
4249446 - How to exclude objects from a Search

How to search for changes to objects while excluding objects that share a common naming convention

Revisado el: miércoles, 24 de agosto de 2022
4306509 - How to exclude events from a search/report

Running an All Active Directory search/report and getting events that are not required for the report. How can certain events such as 'User account...

Revisado el: miércoles, 24 de agosto de 2022
4288331 - How to exclude events as originating by "nt authority\anonymous from a report?

Events originating by "nt authority\anonymous login" are showing up in a report, how may I filter these events?

Revisado el: miércoles, 24 de agosto de 2022
4228084 - How to exclude folder path on EMC Isilon

What is the syntax to exclude folder path on EMC Isilon.

Revisado el: miércoles, 24 de agosto de 2022
4300271 - How to exclude Coordinator from tasks like Reports, Alerts, Purge and Purge jobs

In some environments, all Coordinators are not able to access Exchange Servers or shouldn't be used for other tasks than collecting events for...

Revisado el: miércoles, 24 de agosto de 2022
4270542 - How to Exclude accounts in a Multi-Forest Environment

Unable to exclude accounts from Forest B from the local ChangeAuditor client installed in Forest A.

Revisado el: miércoles, 24 de agosto de 2022
4306482 - How to exclude a process from file system auditing

How can I setup a file system auditing exclusion for a specific process?

Revisado el: miércoles, 24 de agosto de 2022
4314790 - How to ensure the Change Auditor 6.7 archive database contains only events for the calendar year

When archiving events in Change Auditor 6.7, how can administrators ensure that the events are saved in yearly archive databases for the calendar...

Revisado el: miércoles, 24 de agosto de 2022
4311453 - How to enable TLS for syslog with private certificate

Need help to configure Syslog with TLS encryption, configured Syslog on the coordinator to send alerts to our SIEM system which is based on Elastic...

Revisado el: miércoles, 24 de agosto de 2022
4234701 - How to enable or disable Audit events?

What are the steps to either enable or disable some of the Audit events?

Revisado el: miércoles, 24 de agosto de 2022
4346842 - How to enable monitoring on an unmonitored or custom attribute in AD with Change Auditor

Is there any way that we can monitor custom attributes on a user or group object in AD using Change Auditor?

Revisado el: miércoles, 24 de agosto de 2022
4255630 - How to enable File System Auditing on File server using Change Auditor

How to enable File System Auditing on File server using Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4351087 - How to enable Change Auditor Coordinator, Agent, and Plug-in debug logging

This article outlines how to enable Debug logging for Change Auditor Coordinator, Agent, and Plug-ins. This should only be enabled for...

Revisado el: miércoles, 24 de agosto de 2022
4234521 - How to enable Client Certificate Authentication

An administrator needs to enable Client Certificate Authentication.

Revisado el: miércoles, 24 de agosto de 2022
4236715 - How to enable and configure SQL auditing

How to enable and configure SQL auditing.

Revisado el: miércoles, 24 de agosto de 2022
4288817 - How to enable an Alert for a search

How to enable Alerting for a search.

Revisado el: miércoles, 24 de agosto de 2022
4236817 - How to enable an alert for when an account performs an interactive logon

How to create an alert for when an account logs on interactively.

Revisado el: miércoles, 24 de agosto de 2022
4235625 - How to do a new install of CA with new database and archive the old database

Would like to do a new install of CA and create a new database, starting over with a empty database. Is there any way this can be done and not...

Revisado el: miércoles, 24 de agosto de 2022
4224079 - How to disable the Dynamic Object Processing hook

Some third party applications that perform operations around AD Dynamic objects (such as creating and deleting these objects) may result in the...

Revisado el: miércoles, 24 de agosto de 2022
4234322 - Is it possible to deploy different agent versions from the client?

Is it possible to deploy different agent versions from the client via the Deployment tab? IE Deploy the 6.7 agent to specific machines and 6.9 to...

Revisado el: miércoles, 24 de agosto de 2022
4344514 - Is it possible to create a search to display what accounts are currently RDPd into servers?

Is there a search in Change Auditor (or a way to create a custom one) that will show the currently logged in accounts on my servers?

Revisado el: miércoles, 24 de agosto de 2022
4225342 - Is it possible to audit specific attributes for objects in specific OUs?

Is there a way to audit specific attributes for child objects of specific OUs? 

Revisado el: miércoles, 24 de agosto de 2022
4243318 - Is EMC VNXe supported?

Does Change Auditor support auditing EMC VNXe?

Revisado el: miércoles, 24 de agosto de 2022
4314565 - Is deploying a Change Auditor installation to Amazon Web Services supported?

Organizations moving to Amazon Web Services (AWS) may want to deploy the Change Auditor Coordinator and Change Auditor agents to AWS in order to...

Revisado el: miércoles, 24 de agosto de 2022
4306201 - Is Change Auditor IPv6 ready?

Is Change Auditor IPv6 ready?

Revisado el: miércoles, 24 de agosto de 2022
4300218 - Is Change Auditor able to log who modified group permission to a DNS zone

Is it possible to track modifications done to DNSZone security permissions?

Revisado el: miércoles, 24 de agosto de 2022
4261363 - Is ChangeAuditor supported on Windows Server 2012?

Will all editions of ChangeAuditor for Active Directory/Exchange/SQL/Windows File Server/SharePoint be supported when installed on Microsoft...

Revisado el: miércoles, 24 de agosto de 2022
4218663 - Is Change Auditor affected by the SSL 3.0 Protocol Vulnerability and POODLE Attack?

Is Change Auditor affected by the SSL 3.0 Protocol Vulnerability and POODLE attack?

Revisado el: miércoles, 24 de agosto de 2022
4219404 - Invalid object name 'dbo.SystemProperty' exception while installing the Change Auditor Coordinator

An administrator observed the following error while installing the Change Auditor Coordinator; "invalid object name 'dbo.SystemProperty'

Revisado el: miércoles, 24 de agosto de 2022
4316469 - Invalid credentials or GC is unavailable is displayed opening the Administration tab

The following error is displayed when opening the Administration tab in the Change Auditor Client: Invalid credentials or GC://<gc_name> is...

Revisado el: miércoles, 24 de agosto de 2022
4307331 - Invalid credentials errors when trying to configure the shared folder option

When we specify an account in the shared folder configuration, we get an invalid credentials error, however the credentials are correct and has the...

Revisado el: miércoles, 24 de agosto de 2022
4219932 - Invalid database catalog specified when using a hyphen in the database name

During Quest ChangeAuditor Coordinator setup, if you uses hyphen  (-) in the database catalog name, eg: AD-ChangeAuditor-production, you would get...

Revisado el: miércoles, 24 de agosto de 2022
4318101 - INTERNAL: How to stop an Archive job that is continually running and failing in the in the background

The Change Auditor Coordinator continually attempts to execute an Archive Job if the job fails to complete due to an error. Administrators may want...

Revisado el: miércoles, 24 de agosto de 2022
4289403 - FluidFS auditing is no longer working in FluidFS 6.0.31 and higher

FluidFS events not longer being received after upgrade to FluidFS 6.0.310011

Revisado el: miércoles, 24 de agosto de 2022
4294474 - File System auditing stopped, Failed to load driver error

File System auditing stopped, no events being audited. FSService.nptlog lists the following errrors: [ERROR][CFSFilterManager::LoadDriver(278...

Revisado el: miércoles, 24 de agosto de 2022
4250598 - File System Auditing template set for All Shares does not exclude specific sub directories

When creating a File System Auditing template with the Path set to "All Shares", folder path Exclusions may not exclude some paths as expected.

Revisado el: miércoles, 24 de agosto de 2022
4249496 - File System Auditing is not detecting changes

After configuration a File System Auditing template, changes to files and folders is not recorded.

Revisado el: miércoles, 24 de agosto de 2022
4292504 - File Protection for EMC

How to protect file and folders for EMC system

Revisado el: miércoles, 24 de agosto de 2022
4300817 - File Last Write Changed event is captured although it's not selected in configuration

Even with the File Last Write Changed is unchecked in the File System template the event is still captured.

Revisado el: miércoles, 24 de agosto de 2022
4288757 - File Auditing policy doesn't track failed folder access

When creating a file auditing policy that alerts when a user tries to access a folder via a smb share (ig: \\servername\folder) that doesn't have...

Revisado el: miércoles, 24 de agosto de 2022
4312032 - Feature Request audit additional Azure Security related events. The event classes are: User Sign-Ins (non-interactive), Service principal sign-ins, Managed identity sign-ins.

As a Change Auditor Administrator, I would like to audit additional Azure Security related events. The event classes are: User Sign-Ins (non...

Revisado el: miércoles, 24 de agosto de 2022
4243650 - False Security Event Log Cleared events are reported by Change Audtior

Change Auditor is reporting Security Event Log Cleared events for server even though the Windows Security Event log on those servers have not been...

Revisado el: miércoles, 24 de agosto de 2022
4319984 - False positive File System Events

When an user selects a folder or file (for which he has full access), right clicks on the folder or file, selects "Properties", clicks on the...

Revisado el: miércoles, 24 de agosto de 2022
4254053 - False positive "User password changed" and "User password changed by non-owner" events in Change Auditor

False positive "User password changed" and "User password changed by non-owner" events are recorded in the Change auditor Client when the "User...

Revisado el: miércoles, 24 de agosto de 2022
4228004 - False high severity "Domain Controller added to OU" failure events

When a user with insufficient rights tries to move a computer object from one OU to another extra unexpected events are produced. Two failure...

Revisado el: miércoles, 24 de agosto de 2022
4234359 - Failures when trying to manage or create Office365 templates in 7.2

While using Change Auditor 7.2, with the 7.2 CA client installed, there may be failures when trying to mange or create an Office365 auditing template.

Revisado el: miércoles, 24 de agosto de 2022
4307068 - Failed to disable policy 'dell_ca_cm_policy_a_86e016037c6743a5ad995d4bdaa48ff7' on filer 'CIFS server name': The policy is already disabled.

On an Agent auditing a NetApp 8.0.2 Cluster immediately after restarting the Agent ,every thirty seconds the agent logs the warning: Failed to...

Revisado el: miércoles, 24 de agosto de 2022
4220804 - Failed to connect to server to verify credentials when setting credentials for VMWare Auditing.

When setting credentials for a new VMWare template, and error is displayed indicating that a connection couldn't be established.

Revisado el: miércoles, 24 de agosto de 2022
4310411 - Failed Exchange mailbox access events are not being recorded

Failed Exchange mailbox access events are not being recorded when a user attempts to access a mailbox for which he has no access.

Revisado el: miércoles, 24 de agosto de 2022
4282303 - Failed File Access (NTFS) shows the Results as failed when should be Success

If you audit Failed File Access and you deny a use access to a file, when the user opens it, it pops up "access denied " but then opens an Untitled...

Revisado el: miércoles, 24 de agosto de 2022
4344556 - Extending the coordinator SQL connection retry interval

By default, the coordinator will retry to connect to the SQL server every 60 seconds, up to three times, once it has lost connectivity to the...

Revisado el: miércoles, 24 de agosto de 2022
4236906 - Exporting audit template settings

Revisado el: miércoles, 24 de agosto de 2022
4311157 - Exported results "To:" and "From:" fields appear truncated

Performing large number of modifications to object security via ADUC | User Properties | Security tab ("DACL changed on user object") at once can...

Revisado el: miércoles, 24 de agosto de 2022
4311504 - Export to csv/pdf missing Time Detected details

Upgraded to CA V7.1.1 in January. When exporting the results of a search using the web client the "TimeDetected" column is missing in csv and...

Revisado el: miércoles, 24 de agosto de 2022
4299496 - Export search results into csv file not including all the data

How to export a search result into csv file. The well-know solution is to do it from Print ->Print to file. However, I did not find how to include...

Revisado el: miércoles, 24 de agosto de 2022
4233704 - Export of the Change Auditor configuration does not include SQL DLA templates

When the Change Auditor configuration is exported SQL DLA templates are not included.

Revisado el: miércoles, 24 de agosto de 2022
4306623 - Expired Maintenance when trying to access documentation or download software

Expired Maintenance page message comes up when trying to access KB or download software on Quest Website

Revisado el: miércoles, 24 de agosto de 2022
4220104 - Expired certificate causes On Demand Audit Configuration to fail to complete

On Demand Audit configuration fails to complete and the configuration screen is left in a “Configuring with On Demand Audit” state in the Change...

Revisado el: miércoles, 24 de agosto de 2022
4244128 - Excluded Containers listed on Excluded AD Query are recorded in ChangeAuditor database

In ChangeAuditor 6.0, Excluded Containers that are listed on Excluded AD Query, including the default entries, are not properly excluded and...

Revisado el: miércoles, 24 de agosto de 2022
4230978 - Excluded accounts specified on "Select Accounts to Exclude" page do not work cross forest

Consider the following scenario... 1. Two Active Directory forests (Forest1 + Forest2) are being audited by Change Auditor in "multi-forest...

Revisado el: miércoles, 24 de agosto de 2022
4228046 - Excluded Accounts using wild cards

How to exclude computer account initiated changes from auditing via Excluded Accounts wizard.

Revisado el: miércoles, 24 de agosto de 2022
4227925 - Excluded accounts using the AD object picker does not exclude SharePoint events as expected

After configuring an Exclude Accounts template using the AD object picker to select the desired accounts and applying it to exclude SharePoint...

Revisado el: miércoles, 24 de agosto de 2022
4255607 - Exclude single events from being logged in ChangeAuditor from a single User account

Need to exclude a single Active Directory account form logging a single or several events.

Revisado el: miércoles, 24 de agosto de 2022
4300239 - Exclude directory and sub folders/files from auditing on NetApp

Exclude directory and sub folders/files from auditing on NetApp

Revisado el: miércoles, 24 de agosto de 2022
4288989 - Exclude approved users from triggering alerts

Administrators may create a report to monitor objects whose specific attributes were changed. Is there a way to exclude certain users from being...

Revisado el: miércoles, 24 de agosto de 2022
4227985 - Exchange sub-system event "Mailbox Folder Permissions Changed" is only audited for monitored mailboxes

The Exchange sub-system event "Mailbox Folder Permissions Changed" event is only audited for monitored mailboxes. NOTE : Versions of Change...

Revisado el: miércoles, 24 de agosto de 2022
4292945 - Exchange Server Mailbox Audit

How to find the user who exported mailbox via Microsoft Exchange mail server Cmdlet?

Revisado el: miércoles, 24 de agosto de 2022
4317439 - Exchange related events may not be captured if ChangeAuditor Agents are not deployed to all DC

Exchange related events may not be captured if ChangeAuditor Agents are not deployed to all DC's as well as all Exchange servers in a domain.

Revisado el: miércoles, 24 de agosto de 2022
4320272 - Exchange PowerShell auditing can cause memory leak on the Change Auditor Agent

When using Change Auditor 6.x and auditing Exchange PowerShell cmdlets or scripts, you may experience a large amount of RAM being used up by the...

Revisado el: miércoles, 24 de agosto de 2022
4255522 - Exchange events showing the Exchange server as the account making the change instead of the user account that performed the change

Exchange events are showing the Exchange server for the “Who” value instead of the user that  made the change on the Exchange server.

Revisado el: miércoles, 24 de agosto de 2022
4233078 - Exchange ECP (IIS) process hangs and users are unable to change their passwords via Webmail

After installing the Change Auditor agents on Exchange 2010 servers, the ECP IIS process continually hangs. ECP hangs whether using a Direct...

Revisado el: miércoles, 24 de agosto de 2022
4292904 - Exchange 2016 CU20 / 21 support

Exchange 2016 CU20 / 21 support

Revisado el: miércoles, 24 de agosto de 2022
4295252 - Exchange 2013 CU13 When will this be supported

When will Change Auditor support Exchange Server 2013 CU13?

Revisado el: miércoles, 24 de agosto de 2022
4314757 - Exchange "Owner" Events are not recorded in ChangeAuditor

Exchange "Owner" Events are not recorded in ChangeAuditor even though "Owner, Non-Owner" have been specified in the Exchange Auditing Template...

Revisado el: miércoles, 24 de agosto de 2022
4315439 - Exception, "CryptEncrypt" when attempting to deploy Change Auditor Agents using a long password

When trying to install/upgrade Change Auditor Agents from the Change Auditor Client 'Deployment' screen the following error / exception is...

Revisado el: miércoles, 24 de agosto de 2022
4300403 - Exception is generated after Exchange 2013 CU 6 is applied

Exchange services fail after upgrading Exchange 2013 from CU4 to CU6. In example RPC proxy fails with this exception: Could not load file or...

Revisado el: miércoles, 24 de agosto de 2022
4306172 - Events from vCenter are empty or showing incorrect content VS what's in vCenter

Certain events from vCenter 5.1 are not showing correct content when compared to the content in the vCenter log.

Revisado el: miércoles, 24 de agosto de 2022
4225177 - Events that were once working are no longer being generated.

After installing and configuring Change Auditor, events are being generated successfully.  After a period of time, some events no longer are being...

Revisado el: miércoles, 24 de agosto de 2022
4217735 - Events are delayed for Azure Online services.

Events are delayed when auditing Azure online services.  Included services are: Microsoft Office 365 Exchange Online SharePoint Online...

Revisado el: miércoles, 24 de agosto de 2022
4237504 - Event subscription is unable to connect to SIEM software when Change Auditor is upgraded to version 7.0

When a Change Auditor Coordinator is upgraded from a prior Change Auditor version to 7.0, the Event Subscription may not be able to connect to the...

Revisado el: miércoles, 24 de agosto de 2022
4293263 - Event sending to a Syslog subscription is stopped due to an error encountered when sending GPO permission change events

After configuring a subscription to send AD events to a Syslog server, it stops sending events after a period of time:   The Coordinator...

Revisado el: miércoles, 24 de agosto de 2022
4320375 - Event Class "Contacts Modified by Owner" not being recorded by agent

An administrator needs to run reports of users who modifies their Exchange contact, however his search configured for “Contact Modified by Owner...

Revisado el: miércoles, 24 de agosto de 2022
4218735 - Event "User Authenticated through Kerberos" will not generate if using a Windows 2012 R2 Domain Controller.

The event "User Authenticated through Kerberos" will not be generated if using a Windows 2012 R2 Domain Controller.  If the same actions are...

Revisado el: miércoles, 24 de agosto de 2022
4269418 - ERROR_CEPP_NOT_FOUND displayed in ChangeAuditor registration to EMC

Setting up ChangeAuditor for EMC, but  ERROR_CEPP_NOT_FOUND is returned in  the EMC Console: server_cepp <DataMover> -p -i...

Revisado el: miércoles, 24 de agosto de 2022
4346720 - Errors When attempting to install a new agent after an legacy version had been present

Uninstalling or upgrading a legacy 5.x agent can leave latent entries in the UpgradeCodes registry key which blocks the installation of a new agent...

Revisado el: miércoles, 24 de agosto de 2022
4219034 - Errors are displayed in Change Auditor Client when clicking the "Restore Value" button

The error  "The syntax is invalid" or "The server cannot handle directory requests", depending on CA version, is displayed  in Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4220240 - Error: The Quest Change Auditor Coordinator Setup wizard ended prematurely

Trying to install Change Auditor on the same sever where Active Administrator is installed results in the installer failing with an error similar...

Revisado el: miércoles, 24 de agosto de 2022
4351106 - ERROR: LOB data type node does not exist

The following error is showing on the SQL server: Invalid reference to LOB page The Database ID 5, Page (1:10012846), slot 0 for LOB data type node...

Revisado el: miércoles, 24 de agosto de 2022
4329864 - Error: "The request failed with HTTP status 413: Request Entity Too Large"

If SSL is used to access SRS URL on SQL 2005, the error "The request failed with HTTP status 413: Request Entity Too Large" may occur during the...

Revisado el: miércoles, 24 de agosto de 2022
4243247 - Error: "System.Net.HttpListenerException (0x80004005): The process cannot access the file because it is being used by another process"

The Coordinator service fails to start and the errors similar to the following are logged in the Coordinator log: "Exception has been thrown by...

Revisado el: miércoles, 24 de agosto de 2022
4237734 - Error: "No web certificate with the specified hash was found"

Coordinator service will not stay started. The ChangeAuditor.ServiceLog.nptlog log file shows the following error: "No web certificate with the...

Revisado el: miércoles, 24 de agosto de 2022
4351239 - Error: "No public key found matching the coordinator key. Unable to decrypt shared folder data."

The coordinator logs are being flooded with "No public key found matching the coordinator key. Unable to decrypt shared folder data." errors.  This...

Revisado el: miércoles, 24 de agosto de 2022
4339033 - ERROR: "Failed to retrieve directory topology" in ChangeAuditor Agent Deployment Wizard

When running the ChangeAuditor Agent Deployment Wizard, user receives ERROR: "Failed to retrieve directory topology".

Revisado el: miércoles, 24 de agosto de 2022
4223843 - Error: "Error reading from file" when trying to install IT Security Search

When trying to install IT Security Search the following error may occur: "Error reading from file <Path to ITSearch.msi>. Verify that the file...

Revisado el: miércoles, 24 de agosto de 2022
4237776 - Error: "Bad Request, responseContent = Exception of type 'System.Net.Http.HttpRequestException was thrown." displayed for Last Event Response after Configuring QRadar subscription with TLS

On initial configuration of QRadar subscription with TLS, the following is displayed as the "Last Event Response" in the QRadar subscription...

Revisado el: miércoles, 24 de agosto de 2022
4235743 - Error: "All regions are down at the moment" displayed when attempting to sign-in to On Demand Audit

After successfully reaching https://quest-on-demand.com/ and entering the correct credentials, the "All regions are down at the moment" webpage...

Revisado el: miércoles, 24 de agosto de 2022
4294604 - EMC or NetApp NAS have duplicate events in Coordinator when multiple agents included in the audit template

When using two Remote Agents and two Coordinators for HA purpose, on EMC and NetApp, duplicate events are found in the logs.

Revisado el: miércoles, 24 de agosto de 2022
4316497 - EMC Isilon Events are not captured for folders that contain the ampersand "&" character

EMC Isilon Events are not captured for folders that contain the ampersand "&" character. Except for the Folder Renamed event, all subsequent...

Revisado el: miércoles, 24 de agosto de 2022
4314726 - EMC Isilon Events are not captured for folders that contain the apostrophe character

EMC Isilon Events are not captured for folders that contain the apostrophe character. An apostrophe in the file name does not impact auditing...

Revisado el: miércoles, 24 de agosto de 2022
4294450 - EMC audit events do not include the From or To details.

In Change Auditor Client, can search for  folder permission or folder ownership events,   but the event properties do not have the "From" and "To...

Revisado el: miércoles, 24 de agosto de 2022
4288877 - EMC Isilon file contents written events are not getting audited by Change Auditor.

EMC Isilon file contents written events are not getting audited by Change Auditor.. All other Isilon events are being recorded in Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4255078 - EMC events appear delayed when viewed in the Change Auditor Client

The ChangeAuditor Coordinator is receiving new EMC events from a Change Auditor agent configured for EMC but the events appear to be delayed when...

Revisado el: miércoles, 24 de agosto de 2022
4227989 - EMC file/folder security changes produce 'Ownership changed' events on Celerra or VNX devices

When the security is changed on a file/folder located on EMC-based storage the following may occur: 1) The change records a warning similar to...

Revisado el: miércoles, 24 de agosto de 2022
4224057 - EMC file/folder security changes produce 'Ownership changed' events on Isilon

When the security is changed on a file/folder located on Isilon-based storage the following may occur: The change records a warning similar to...

Revisado el: miércoles, 24 de agosto de 2022
4220983 - EMC Isilon audit events are not being recorded in Change Auditor

After following the instructions in the Change Auditor for EMC User Guide to set up auditing for an EMC Isilon server, events are not being recorded.

Revisado el: miércoles, 24 de agosto de 2022
4351109 - Email alerts failing to send in Change Auditor. ERROR: SMTP Exception: Object reference not set to an instance of an object

Email alerts in Change Auditor are failing to send with the following error in the coordinator logs: SMTP Exception: Object reference not set to...

Revisado el: miércoles, 24 de agosto de 2022
4286067 - Email alerts do not display the correct time.

Alerts in ChangeAuditor do not display the correct time.

Revisado el: miércoles, 24 de agosto de 2022
4249250 - Email alerts no longer being sent after upgrade

After upgrading to a newer version, the email alerts configured prior to upgrading are no longer being sent when the related event occurs.

Revisado el: miércoles, 24 de agosto de 2022
4273938 - Email Alert Body always shows time in UTC/GMT

Revisado el: miércoles, 24 de agosto de 2022
4230875 - Edit the Change Auditor repository port via "Coordinator Configuration Tool"

It is not currently possible using Change Auditor 5.x to edit the Repository connection port from the Coordinator server. This port is used by CA...

Revisado el: miércoles, 24 de agosto de 2022
4244233 - Dot character in account name causes High Security Agent install to fail

Installing High Security Agent using name.name ( using a " ." ) fails.

Revisado el: miércoles, 24 de agosto de 2022
4329099 - Domain controllers having 100% memory spike and large dump files generated

Large dump files were generated under %Program Files%\Quest\ChangeAuditor\Agent\Plug-in for Active Directory\Dumps on every Domain Controller...

Revisado el: miércoles, 24 de agosto de 2022
4295429 - Domain Controllers hang after Agent Upgrade to 6.5

ChangeAudtir was upgraded to 6.5. After that upgrade, the Domain Controllers hang.

Revisado el: miércoles, 24 de agosto de 2022
4256643 - Domain Controller Outbound TCP/445 Connections to Clients

While looking at the network traffic, it was found that the Domain Controllers talk Outbound to random clients ( Workstations ) over TCP/445...

Revisado el: miércoles, 24 de agosto de 2022
4289931 - Does the Web Client have an option to switch from HTTP to HTTPS?

Does the Web Client have an option to switch from HTTP to HTTPS? to stop sending the loging detail in the clear text.

Revisado el: miércoles, 24 de agosto de 2022
4255381 - Does the Threat Detection module require an additional license?

Is an additional license required to use the Threat Detection feature?

Revisado el: miércoles, 24 de agosto de 2022
4318363 - Does the Microsoft patch MS15-121 affect the Change Auditor agent

An administrator is no longer able to log into one of his Domain Controllers after applying Microsoft patch MS15-121, this Domain Controller has...

Revisado el: miércoles, 24 de agosto de 2022
4346788 - How to automatically save/publish a report to a shared/network folder/drive?

Can Change Auditor automatically save / publish a report to a shared / network / folder / drive?

Revisado el: miércoles, 24 de agosto de 2022
4282453 - How to Audit only Static dns A Records Changes

We would like to be able to only generate audit events for modification of STATIC A DNS records. By default, when enabling the DNS A Record events...

Revisado el: miércoles, 24 de agosto de 2022
4219386 - How to audit registry changes?

How to configure auditing for registry changes?

Revisado el: miércoles, 24 de agosto de 2022
4215659 - How to Audit Logon Events Server

After setting up Change Auditor or InTrust to collect Logon events, only failed logon events show.

Revisado el: miércoles, 24 de agosto de 2022
4318493 - How to audit changes to the condition filter of a msExchDynamicDistributionList class

An administrator needs to monitor changes to the LDAP filter condition of a Dynamic Distribution List, but the event is not being captured by the...

Revisado el: miércoles, 24 de agosto de 2022
4307604 - How to Audit Group Managed Service Account (gMSA) objects

Changes to AD Group Managed Service Account (gMSA) objects are not being audited.

Revisado el: miércoles, 24 de agosto de 2022
4266313 - How To Audit an object Move or Copy

Revisado el: miércoles, 24 de agosto de 2022
4222679 - How to audit Contact objects

Changes to AD Contact objects are not being Audited.

Revisado el: miércoles, 24 de agosto de 2022
4300386 - How to assign users to roles in Change Auditor

Can Active Directory users or groups be added to Change Auditor roles?

Revisado el: miércoles, 24 de agosto de 2022
4257901 - How to archive events to different drive than the production database

Some administrators may want to keep ChangeAuditor archived events on a different volume (drive) than the production database's volume. 

Revisado el: miércoles, 24 de agosto de 2022
4254364 - How to Archive data in Change Auditor 6.x and 7.x

Scheduled Archiving was added to Change Auditor as of version 6.7. This allows users to create scheduled jobs to move events from the production...

Revisado el: miércoles, 24 de agosto de 2022
4255440 - How to apply new license files to Change Auditor

How to apply new license files to Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4230855 - How to allow NT AUTHORITY\ANONYMOUS LOGON to access protected objects

Events showing 'Failed Attempt to Modify Protected Active Directory Object' for activities by User: NT AUTHORITY\ANONYMOUS LOGON. Need to add this...

Revisado el: miércoles, 24 de agosto de 2022
4244213 - How to alert when the "Operating System" value changes for any Computer object in Active Directory

Administrators may want to be alerted when the "Operating System" value changes to a specified version for a Computer object in Active Directory...

Revisado el: miércoles, 24 de agosto de 2022
4231257 - How to alert on SQL SA account password reset

How to alert on SQL SA account password reset.

Revisado el: miércoles, 24 de agosto de 2022
4255444 - How to add unmonitored object attribute

How to add unmonitored object attribute for auditing.

Revisado el: miércoles, 24 de agosto de 2022
4238036 - How to add or remove data from a report?

Can the reports be modified so that additional data is shown, less data is shown or the order changed?

Revisado el: miércoles, 24 de agosto de 2022
4346752 - How to add multiple users to an email alert or report

Need to know how to get an alert or report to email more than one user

Revisado el: miércoles, 24 de agosto de 2022
4223373 - How to add Licenses to Change Auditor

In order to enable the different auditing features available in Change Auditor, different licenses need to be added.  This article describes how to...

Revisado el: miércoles, 24 de agosto de 2022
4230947 - How to add columns to a report

The default reports from Change Auditor do not contain enough detail.  How do I add columns with the details I need in my report?

Revisado el: miércoles, 24 de agosto de 2022
4229641 - How to add columns to a report

The default reports from Change Auditor do not contain enough detail.  How do I add columns with the details I need in my report?

Revisado el: miércoles, 24 de agosto de 2022
4237980 - How to add additional columns and details to search results

The default columns displayed in the search results may not provide the level of detail required. Additional event details can be displayed in the...

Revisado el: miércoles, 24 de agosto de 2022
4225261 - How to Add a Unique Identifier to the Subject of each Change Auditor Alert

We want to have a unique identifier added to the Subject line of each Alert that goes out.

Revisado el: miércoles, 24 de agosto de 2022
4320394 - How to add a filter to exclude a VMware root account events from appearing in a search/report

An administrator may need to add an exclusion filter to prevent events generated by a VMware root account from appearing in the results of a...

Revisado el: miércoles, 24 de agosto de 2022
4266200 - How many days does ChangeAuditor for SharePoint import on install?

How many days does ChangeAuditor for SharePoint import on install?

Revisado el: miércoles, 24 de agosto de 2022
4289791 - How long does ChangeAuditor keep the records in the Database containing the data collected via the agent audits?

How long does ChangeAuditor keep the records in the Database containing the data collected via the agent audits?

Revisado el: miércoles, 24 de agosto de 2022
4237790 - How is the data for SQL Data Level Auditing collected?

What is used to obtain the data for SQL DLA?

Revisado el: miércoles, 24 de agosto de 2022
4288654 - How is an Archive Database created

How does Change Auditor create the Archive Database

Revisado el: miércoles, 24 de agosto de 2022
4351343 - How Event Log Scavenging Works

Details of how event log scavenging works.

Revisado el: miércoles, 24 de agosto de 2022
4237694 - How does the GPOAdmin and Change Auditor integration work?

How does the GPOAdmin and Change Auditor integration work?

Revisado el: miércoles, 24 de agosto de 2022
4312888 - How does the Change Auditor Client and ChangeAuditor Agents determine where the Change Auditor Coordinator is installed

The Change Auditor Client and ChangeAuditor Agents automatically detect where the Coordinator is installed. How is this done?

Revisado el: miércoles, 24 de agosto de 2022
4294783 - How does the Archive Database creation works

What are the rules that manage the Archive Database creation?

Revisado el: miércoles, 24 de agosto de 2022
4243087 - How does the Change Auditor Agent determine the group membership of Active Directory groups "Allowed to Access Protected Objects"

When Change Auditor Protection templates are configured with Active Directory groups added to the "Select Account Allowed to Access Protected...

Revisado el: miércoles, 24 de agosto de 2022
4236472 - How does the "Auto Deploy to New Servers in the Forest" work?

Revisado el: miércoles, 24 de agosto de 2022
4355007 - How does one publish ChangeAuditor searches to SQL Reporting Services

How does one publish ChangeAuditor searches to SQL Reporting Services so these searches can be used as SRS Reports?

Revisado el: miércoles, 24 de agosto de 2022
4219836 - How does one change the default Agent installation location from the ChangeAuditor Client?

How does one change the default Agent installation location from the ChangeAuditor Client?

Revisado el: miércoles, 24 de agosto de 2022
4307174 - How does disabling SCMHook impact on event collection

What does SCMHook monitor and what are the impacts in disabling it?

Revisado el: miércoles, 24 de agosto de 2022
4326012 - How does Client connects to the coordinator.

Explaining the Client connection to the coordinator

Revisado el: miércoles, 24 de agosto de 2022
4249361 - How does Change Auditor integrate with SIEM?

How can Change Auditor be integrated with SIEM?

Revisado el: miércoles, 24 de agosto de 2022
4236772 - How does Change Auditor integrate with SCOM?

How does CA and SCOM integrate?

Revisado el: miércoles, 24 de agosto de 2022
4300294 - How does Change Auditor agents audit event information.

How does the agent get the audited events.

Revisado el: miércoles, 24 de agosto de 2022
4237781 - How does Change Auditor determine the License Count?

How does Change Auditor determine how many users are enabled or exchange mailbox users there are for licensing?

Revisado el: miércoles, 24 de agosto de 2022
4236295 - How do you search for DNS events on a specific object?

Revisado el: miércoles, 24 de agosto de 2022
4348892 - How do you determine the SQL query used by the Searches?

Is there a way to show the SQL query used by a search?

Revisado el: miércoles, 24 de agosto de 2022
4297727 - Does the lastest release of Change Auditor Support Exchange 2016 CU15?

Which Exchange 2016 CU's are supported in CA version 7.0.4

Revisado el: miércoles, 24 de agosto de 2022
4312960 - Does the Change Auditor database support Snapshot Isolation or Read Committed Snapshots?

Administrators may want to Snapshot Isolation or Read Committed Snapshots on the Change Auditor database in order to improve overall performance...

Revisado el: miércoles, 24 de agosto de 2022
4254616 - Does the Change Auditor Coordinator write an event to an Event Log when it is not able to connect to the SQL database?

Administrators may require an event written to an Event Log (either "Change Auditor Coordinator Service" event log or Windows Application log...

Revisado el: miércoles, 24 de agosto de 2022
4243391 - Does the ChangeAuditor Web Client support Single Sign On?

Is it possible for the ChangeAuditor Web Client to support Single Sign On (SSO) so that the users don't have to type in their credentials?

Revisado el: miércoles, 24 de agosto de 2022
4217135 - Does the Change Auditor license limit the number of agents that can be deployed?

Is there any limit imposed by the license on how many agents can be deployed?

Revisado el: miércoles, 24 de agosto de 2022
4318344 - Does the Change Auditor (Exchange Plug-in) agent enable the Exchange Scripting agent on start-up?

After installing the Change Auditor  agent on an Exchange 2010 server an administrator manually disabled the Exchange Scripting agent. However a...

Revisado el: miércoles, 24 de agosto de 2022
4312966 - Does the Change Auditor 6.x database require SQL maintenance jobs?

Does the Change Auditor 6.x database require SQL maintenance jobs to maintain the integrity of the database?

Revisado el: miércoles, 24 de agosto de 2022
4294887 - Does the change auditor agent support being installed on Server 2012 R2 server core?

Does Change Auditor support 2012R2 and 2016 server core for the agents.

Revisado el: miércoles, 24 de agosto de 2022
4348964 - Does the agent service need to be running in order for the agent software to be remotely uninstalled from the Deployment tab?

Does the Change Auditor Agent service need to be running/enabled in order to be remotely uninstalled from the deployment tab in the Client?

Revisado el: miércoles, 24 de agosto de 2022
4294277 - Does DNS PTR Record added or deleted provide the Who and Origin?

Auditing of  DNS PTR Record added or deleted events does not provide the Who and Origin?

Revisado el: miércoles, 24 de agosto de 2022
4344566 - Does ChangeAuditor support auditing logon events?

Does Change Auditor support auditing logon events for servers and workstations?

Revisado el: miércoles, 24 de agosto de 2022
4285134 - Does ChangeAuditor reports as to which too has made changes through RSAT Tools / ADSIEDIT / LDAP Browser / Powershell

If an admin performs a modification in AD through RSAT Tools / ADSIEDIT / LDAP Browser / Powershell, will change auditor report which tool made the...

Revisado el: miércoles, 24 de agosto de 2022
4250254 - Does ChangeAuditor have the ability to track File Copy events

Adminsitrators may want ChangeAuditor to track when files are copied from a monitored file system to another location.

Revisado el: miércoles, 24 de agosto de 2022
4249471 - Does Change Auditor support Windows Server 2019?

Which version of Change Auditor supports Windows Server 2019?

Revisado el: miércoles, 24 de agosto de 2022
4244072 - Does ChangeAuditor have the ability to filter events by authentication failure results

Administrators may have a requirement to separate login failure events based on the text in the "What" field in the event properties. However...

Revisado el: miércoles, 24 de agosto de 2022
4236611 - Does ChangeAuditor for EMC support VNXe

Does ChangeAuditor for EMC support VNXe?

Revisado el: miércoles, 24 de agosto de 2022
4219712 - Does Change Auditor use Event Tracing for Windows (ETW)?

Does Change Auditor use ETW to collect the Audit Data?

Revisado el: miércoles, 24 de agosto de 2022
4307645 - Does Change Auditor support SonicWALL auditing?

Does Change Auditor support SonicWALL auditing?

Revisado el: miércoles, 24 de agosto de 2022
4288953 - Does Change Auditor support newer SQL Server service packs than are currently listed in the release notes?

 Are there any known issues with with applying a newer service pack  to a SQL Server hosting a Change Auditor database?  

Revisado el: miércoles, 24 de agosto de 2022
4288724 - Does Change Auditor support NetApp ONTAP version 9.5 update 2

Does Change Auditor support NetApp ONTAP version 9.5 update 2

Revisado el: miércoles, 24 de agosto de 2022
4281170 - Does Change Auditor support SQL multi-subnet failover clustering?

Does Change Auditor support Microsoft SQL Server multi-subnet (Always On) failover clustering.

Revisado el: miércoles, 24 de agosto de 2022
4244020 - Does Change Auditor support for NetApp 8.3.1P2?

NetApp Data Ontap was released December 16th, 2015. Does Change Auditor support NetApp 8.3.1P2?

Revisado el: miércoles, 24 de agosto de 2022
4243299 - Does Change Auditor support EMC Isilon NAS

Is auditing EMC Isilon devices supported?

Revisado el: miércoles, 24 de agosto de 2022
4237725 - Does Change Auditor support SQL High Availability technology other than cluster?

Does Change Auditor support the SQL AlwaysOn High Availability feature?  Also is it possible to do SQL transaction log shipping with the...

Revisado el: miércoles, 24 de agosto de 2022
4230408 - Does Change Auditor support Panzura?

Does Quest offer a module for monitoring Panzura devices in Change Auditor?

Revisado el: miércoles, 24 de agosto de 2022
4225394 - Does Change Auditor support using a database alias?

Is supported to use a database alias for the Change Auditor database?

Revisado el: miércoles, 24 de agosto de 2022
4224193 - Does Change Auditor support Windows 2022?

Does Change Auditor currently support Windows Sever 2022?

Revisado el: miércoles, 24 de agosto de 2022
4220314 - Does Change Auditor support non-Microsoft versions of SQL?

Is it supported to have the CA database hosted on a non-Microsoft SQL server (for example Postgres) or to audit non-Microsoft SQL?

Revisado el: miércoles, 24 de agosto de 2022
4218688 - Does Change Auditor support SQL Extended Events?

As of SQL Server 2008, Microsoft has introduced a new auditing option called Extended Events.  Some customers have asked if Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4344668 - Does Change Auditor support auditing authentication and logon events for Group Managed Service Accounts (GMSA)?

Does Change Auditor support auditing authentication and logon events for  Group Managed Service Accounts (GMSA)?

Revisado el: miércoles, 24 de agosto de 2022
4319812 - Does Change Auditor support Azure Active Directory

Does Change Auditor support auditing events from Azure Active Directory?

Revisado el: miércoles, 24 de agosto de 2022
4288512 - Does Change Auditor support auditing EMC Unity

Does Change Auditor support auditing EMC Unity?

Revisado el: miércoles, 24 de agosto de 2022
4277821 - Does Change Auditor Support Auditing of Hyper-V?

Is Hyper-v Auditing going to be supported as Vmware is now?

Revisado el: miércoles, 24 de agosto de 2022
4237457 - Does Change Auditor support auditing VMware?

Are there any add-ons or modules for VMware auditing?

Revisado el: miércoles, 24 de agosto de 2022
4234123 - Does Change Auditor support cross forest agents?

Administrators may have a need to monitor multiple Active Directory forests from one Change Auditor installation.

Revisado el: miércoles, 24 de agosto de 2022
4232352 - Does Change Auditor support Core Server 1709?

Does Change Auditor support Core Server 1709?

Revisado el: miércoles, 24 de agosto de 2022
4230881 - Does Change Auditor support EMC Common Event Enabler (CEE) 7.1

No EMC audit events are produced and the following warning may be found in the Change Auditor agent log when EMC CEE 7.1 is installed: "Error...

Revisado el: miércoles, 24 de agosto de 2022
4224091 - Does Change Auditor support EMC Common Event Enabler (CEE) 8.7.8.1?

After installing EMC Common Event Enabler (CEE) 8.7.8.1, no EMC events are recorded in Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4211641 - Does Change Auditor support any API integrations?

Is there any available technical documentation that explains how Change Auditor can be integrated via an API to perform certain actions such as...

Revisado el: miércoles, 24 de agosto de 2022
4346782 - Does Change Auditor integrate with Splunk?

Does Change Auditor have the ability to send event information to Splunk?

Revisado el: miércoles, 24 de agosto de 2022
4306647 - Does Change Auditor integrate with SCOM 2016

Looking to deploy SCOM 2016 and would like to know if it will integrate with Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4277718 - Does Change Auditor support Active Roles 7.5

Which versions of Change Auditor support integrating with Active Roles 7.5?

Revisado el: miércoles, 24 de agosto de 2022
4255485 - Does Change Auditor parse the Windows Security Event log on the Domain Controllers

To capture AD Audit data, does CA use the Security Event log on the DCs?

Revisado el: miércoles, 24 de agosto de 2022
4254279 - Does Change Auditor have the ability to send notifications via Slack?

Administrators may like to have the ability to configure Change Auditor Alerts with notifications in Slack. Does Change Auditor have the ability to...

Revisado el: miércoles, 24 de agosto de 2022
4250927 - Does Change Auditor have the ability protect DACLs on groups?

Does Change Auditor have the ability protect DACLs on groups?

Revisado el: miércoles, 24 de agosto de 2022
4250504 - Does Change Auditor record an event when an agent is not able to connect to any Change Auditor Coordinator in a multi-Coordinator environment?

Currently, there is a "Change Auditor Agent disconnected" event which is recorded by the Change Auditor Coordinator when a Change Auditor Agent...

Revisado el: miércoles, 24 de agosto de 2022
4237263 - Does Change Auditor require Internet access to function?

Does Change Auditor require any type of internet access (Internet Connectivity) outside of an internal network to function?

Revisado el: miércoles, 24 de agosto de 2022
4346879 - Does Change Auditor for Logon Activity track NTLM authentication requests on Domain Controllers?

Change Auditor for Logon Activity tracks Kerberos authentication requests on Domain Controllers. Can Change Auditor for Logon Activity also track...

Revisado el: miércoles, 24 de agosto de 2022
4344407 - Does Change Auditor 7.x coordinator support TLS 1.2 for SQL communication?

Does Change Auditor 7.x coordinator support TLS 1.2 for SQL communication?

Revisado el: miércoles, 24 de agosto de 2022
4320049 - Does Change Auditor for Active Directory capture the same event details that shows in Windows Event Logs?

Does Change Auditor for Active Directory capture the same event details that shows in Windows Event Viewer Security logs or will it provide more?

Revisado el: miércoles, 24 de agosto de 2022
4288645 - Does Change Auditor audit removable media

Is there a report in Change Auditor that would monitor removable media devices?

Revisado el: miércoles, 24 de agosto de 2022
4269525 - Does Change Auditor enable the user to review historic reports which have been previously sent?

Does Change Auditor enable the user to review historic reports which have been scheduled and sent via email? No, Change Auditor does not store...

Revisado el: miércoles, 24 de agosto de 2022
4260667 - Does Change Auditor for SQL support auditing SQL Express Edition?

Does Change Auditor support auditing SQL Express edition?

Revisado el: miércoles, 24 de agosto de 2022
4230997 - Does Change Auditor Capture Authentication Services events?

Does Change Auditor Capture Authentication Services events?

Revisado el: miércoles, 24 de agosto de 2022
4222135 - Does Change Auditor audit DB2 databases on IBM mainframe?

Does Change Auditor audit DB2 databases on IBM mainframe?

Revisado el: miércoles, 24 de agosto de 2022
4306690 - Does CA version 6.7.1352 support Microsoft Exchange Server 2013 Cumulative Update CU10?

Before deploying the newest version of Change Auditor, does version 6.7.1352 support Microsoft Exchange 2013 CU10? We have had issues in the past...

Revisado el: miércoles, 24 de agosto de 2022
4228036 - Does 6.9.1 support Exchange Server 2013 cumulative update 15

Does 6.9.1 support Exchange Server 2013 cumulative update 15? 

Revisado el: miércoles, 24 de agosto de 2022
4300110 - Does Change Auditor support API for external Applications?

API support entitlement for Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4225106 - Do Change Auditor 6.x Agents communicate with the Change Auditor Database?

Do Change Auditor  Agents need to be able to communicate with the Change Auditor Database?

Revisado el: miércoles, 24 de agosto de 2022
4236481 - DNS service auditing in Change Auditor 6.7.1458 and higher

In response to a need for better auditing information for changes to DNS from Windows DNS Manager and other tools that use the DNS Service...

Revisado el: miércoles, 24 de agosto de 2022
4237137 - Disk Size Changed Event is not generated

Disk Size Event are not getting generated from DCs. While this Event Class is enabled for collection, unless the DC or the Agent are...

Revisado el: miércoles, 24 de agosto de 2022
4300623 - Disclaimer added twice to alert emails

When setting up alerts, the email that is sent has a double disclaimer added to the email signature. In the alert tab, the signature is set using...

Revisado el: miércoles, 24 de agosto de 2022
4348986 - Disabling TLS 1.0 and TLS 1.1 on VMWare hosts

I wish to disabled TLS 1.0 and 1.1 on my VMWare hosts but Change Auditor stops gathering events when I do.

Revisado el: miércoles, 24 de agosto de 2022
4231309 - Disabling protection on individual GPOs and pushing the configuration to the agent does not take effect until the agent is restarted

When GPO Protection is enabled and is configured to be stored in Active Directory, disabling protection on individual GPOs and pushing the...

Revisado el: miércoles, 24 de agosto de 2022
4319403 - Disabled file system events are being sent after upgrade.

Agents were configured to prevent file activity events from being sent to the coordinator. Event Logging is enabled to send events to the Windows...

Revisado el: miércoles, 24 de agosto de 2022
4219459 - Disable the agent from failing over to other Coordinators

Is it possible to force the agent to not failover to another Coordinator if the Coordinator it is currently connected to is no longer available?

Revisado el: miércoles, 24 de agosto de 2022
4233514 - Disable or modify the frequency of the Coordinator Topology Task

Is there a way to disable or control the frequency of the Topology Task executed by the Coordinator?

Revisado el: miércoles, 24 de agosto de 2022
4219586 - Deploying the Change Auditor PowerShell modules without installing the Client

Is there a way to deploy the CA PowerShell modules into the environment without having to install the full client package on each workstation?

Revisado el: miércoles, 24 de agosto de 2022
4344411 - Deploying Foreign Forest CA Agents

For foreign forest agents, what all is required for agent to communicate back to Coordinator server?

Revisado el: miércoles, 24 de agosto de 2022
4334326 - Deploying Change Auditor/Active Roles integration scripts

Change Auditor (CA) is not integrating with Active Roles (AR) operations and does not provide the correct Initiator name. Also: is it possible to...

Revisado el: miércoles, 24 de agosto de 2022
4307771 - Deployed foreign forest agent fails to connect to coordinator in root domain.

Foreign Forest agent deployment is not working as expected and the logs are showing the following error messages: "Failed to connect to...

Revisado el: miércoles, 24 de agosto de 2022
4219521 - Deploying an agent results in the error: "The remote procedure call failed"

Agent deployment fails from the ChangeAuditor Client with the Deployment Result: "The remote procedure call failed"

Revisado el: miércoles, 24 de agosto de 2022
4230114 - Deployed agent statue stuck in pending state

A user observer that an agent status was stuck in a pending after deployment, the agent status viewed form the target server showed that the agent...

Revisado el: miércoles, 24 de agosto de 2022
4231043 - Dell Change Auditor FluidFS configuration error, Failed to subscribe to the cluster. A subscriber by another name already exists

While attempting to configure the FluidFS template within the Change Auditor client, the wizard fails with error: The operation to commit the...

Revisado el: miércoles, 24 de agosto de 2022
4316443 - Deletion of OU in Active Directory does not show events for the deletion of the Objects that were in the OU

When an Active Directory Organizational Unit (OU) is deleted in on a Windows 2012 Domain Controller and the "Delete Subtree" option is selected...

Revisado el: miércoles, 24 de agosto de 2022
4269516 - Deletion of NetApp cifs content is not audited when deleted from a Windows 8.1, Windows 10, or Windows 12 workstation

When a file deleted on a cifs share (Netapp Cluster-Mode only), a delete event is not recorded by Change Auditor if the file is deleted using a...

Revisado el: miércoles, 24 de agosto de 2022
4234516 - Deleting LIKE defined search criteria from the main Client window does not fully delete the criteria

When attempting to use the Delete Criteria button to remove unwanted search criteria that was defined using the LIKE statement as opposed to...

Revisado el: miércoles, 24 de agosto de 2022
4299886 - Splunk Plugin failed to enable after server restart

Event Subscription like Splunk failed to start after a server restart. Is there a reason why?

Revisado el: miércoles, 24 de agosto de 2022
4334247 - Spectre and Meltdown Vulnerabilities

Will there be any related patches released to address these vulnerabilities?

Revisado el: miércoles, 24 de agosto de 2022
4300439 - Specify which Coordinator(s) are responsible for Alerting and report delivery

An an administrator has multiple domains with unique email configuration requirements and needed to know if there a way to target a specific...

Revisado el: miércoles, 24 de agosto de 2022
4294735 - Specify which coordinators should process purge, archive, and scheduled report jobs for improved load balancing

Need to specify which Coordinator runs the archive job.

Revisado el: miércoles, 24 de agosto de 2022
4234208 - Specific attribute changes are not being recorded

When running a search, cannot find events for some attributes

Revisado el: miércoles, 24 de agosto de 2022
4306020 - Sometimes Account Locked Out events in Windows Security log and ITAD log, do not have a corresponding event in the Change Auditor database.

While an account locked out event does exists in the "Windows Security" and when event logging is enabled in the "ITAD" log - running a query on...

Revisado el: miércoles, 24 de agosto de 2022
4255448 - Sometimes an account is locked out but there isn't a corresponding Lockout event.

Consider the following situation... A user types their password wrong multiple times, enough to be locked out. A Lockout event is generated via...

Revisado el: miércoles, 24 de agosto de 2022
4318628 - Some reports are not returning data

An administrator create a search filter using a wildcard (e.g. zyx*) character to target groups with specific trailing character in its name and...

Revisado el: miércoles, 24 de agosto de 2022
4219739 - Some OUs may be missing or not displayed when browsing for Active Directory objects to add within the Change Auditor Client

When using the Add | Subsystem | Active Directory functionality to add an Active Directory container (OU), the desired OU is missing from the tree...

Revisado el: miércoles, 24 de agosto de 2022
4223315 - Some old events are not displayed after an upgrade to Change Auditor 6.6

Consider the following case... Change Auditor 5.9 is running and has a large number of events in the database.  (Over 1 million, for example...

Revisado el: miércoles, 24 de agosto de 2022
4230916 - Some events captured leaving Process Name blank

There are events captured in client that have no process name associated with the event.

Revisado el: miércoles, 24 de agosto de 2022
4220808 - Some Email Alerts do not contain the ARS Initiator UserName value

When running Change Auditor 6.5 and Active Roles Server (ARS) 6.8 (or lower), some email alerts may not contain the Initiator UserName value.

Revisado el: miércoles, 24 de agosto de 2022
4230867 - Some Domain Users were added to Administrators group

Would like to alert when changes have been added to the domain administrators group.

Revisado el: miércoles, 24 de agosto de 2022
4294665 - SNMP Alerts not being sent

When we trigger an alert that should send an SNMP trap it is not sending the trap. It does send the SMTP but not SNMP. I can send a test trap from...

Revisado el: miércoles, 24 de agosto de 2022
4233536 - SNMP behavior in multi-coordinator installations

SNMP alerting task is Coordinator-bound. When the Coordinator that owns SNMP alert task is offline SNMP alerts will queue/wait for the...

Revisado el: miércoles, 24 de agosto de 2022
4230186 - SNMP alerts not being logged in the Alert History

SNMP alerts do not appear in the Alert History.

Revisado el: miércoles, 24 de agosto de 2022
4321117 - Smart card authentication causing the CA Client to hang

After enabling the smart card authentication feature for Change Auditor, the client hangs upon successful authentication.

Revisado el: miércoles, 24 de agosto de 2022
4316513 - Smart Alert "Event Occurs Within" setting is not recognized by Change Auditor

When creating a Change Auditor Smart Alert, the "Event Occurs Within" setting is not recognized by Change Auditor and only uses an "Event Occurs...

Revisado el: miércoles, 24 de agosto de 2022
4305800 - Smart alerts sending one email per event when the threshold is reached.

Configured a smart alert when there is more than 50 object deletions it sends an custom email message. The problem that mail does not come once but...

Revisado el: miércoles, 24 de agosto de 2022
4233565 - Smart alert functionality not working correctly on a single object

If a Smart Alert is configured with "On A Single Object" check box enabled, the alert emails can contain multiple objects if they all match the...

Revisado el: miércoles, 24 de agosto de 2022
4227930 - Smart alert not displayed as enabled in web client after being enabled via Win32 client

Consider the following scenario... When the "Smart Alert Enabled" check box on the Alert tab of a Search is checked and the Search is saved in...

Revisado el: miércoles, 24 de agosto de 2022
4232424 - Unable to manually type in file/folder path in File System subsystem under Add with Events

Unable to manually type in file/folder path in File System subsystem under Add with Events

Revisado el: miércoles, 24 de agosto de 2022
4260660 - Unable to login to web client with error "you have tried to create a channel to a service that does not support .Net Framing"

The following error is recorded in the in the log when attempting to o login to the ChangeAuditor Web Client: You have tried to create a channel...

Revisado el: miércoles, 24 de agosto de 2022
4254287 - Unable to log into the Change Auditor Client after a new Change Auditor installation

Unable to log into the Change Auditor Client after a new Change Auditor installation. The following is displayed when attempting to login the...

Revisado el: miércoles, 24 de agosto de 2022
4319828 - Unable to load list of unmonitored attributes in the ChangeAuditor Client

In the Change Auditor Client under Administration Tasks | Auditing | Active Directory | Attributes, the list of unmonitored attributes will not...

Revisado el: miércoles, 24 de agosto de 2022
4306920 - Unable to install Web Client

Unable to install Change Auditor Web Client on a Windows 2016 Server with the following error: Quest Change Auditor 7.0.3 Web Client...

Revisado el: miércoles, 24 de agosto de 2022
4346955 - Unable to install the Web-Client, installation hangs when searching for a coordinator

The web-client Installation hangs after putting in the site name and port and it won't go past that point. When you click "next" it hangs...

Revisado el: miércoles, 24 de agosto de 2022
4299788 - Unable to install the CA Web Client on a non-English OS

Unable to upgrade or install the CA Web Client on a non-English OS. 

Revisado el: miércoles, 24 de agosto de 2022
4244694 - Unable to install change auditor coordinator connecting to Azure SQL Database

We are trying to install change coordinator 7.1.1 On-Prem connecting to Azure SQL DB but it fails with error certificate/credential invalid. But we...

Revisado el: miércoles, 24 de agosto de 2022
4289239 - Unable to inject NPDTWrap.dll the parameter is incorrect error stops agent from starting

6.6.716 agent on Windows 2008R2 does not start and the following error appears in the CA log: Level: ERROR Thread: 5684 Logger: CServicesHook...

Revisado el: miércoles, 24 de agosto de 2022
4294524 - Unable to filter out Threat Detection searches by Account

When adding a Who filter to a Threat Detection search, the query result in a an empty screen

Revisado el: miércoles, 24 de agosto de 2022
4253726 - Unable to filter Active Directory events based on an underscore in the name on the Active Directory Object

Unable to filter Active Directory events based on an underscore in the name on the Active Directory Object when running a Change Auditor Search...

Revisado el: miércoles, 24 de agosto de 2022
4220020 - Unable to edit Active Directory Protection Templates

When navigating to Protection Templates in the ChangeAuditor Client, the Edit button is grayed out. The account is a member of the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4236016 - Unable to distinguish between legitimate and false positive events for "Failed file access (NTFS permissions)"

Change Auditor for Windows Files Server is unable to distinguish between legitimate and false positive events for "Failed file access (NTFS...

Revisado el: miércoles, 24 de agosto de 2022
4318159 - Unable to determine the Result of Change Auditor events sent to System Center Operations Manager

When Change Auditor is configured to send events to System Center Operations Manager (SCOM), the event details in SCOM do not indicate the Result...

Revisado el: miércoles, 24 de agosto de 2022
4224548 - Unable to deploy agent remotely - "The process cannot access the file because it is being used

When deploying an agent from the Client > Deployment Tab the installation fails. Checking the Coordinator log file the following errors are...

Revisado el: miércoles, 24 de agosto de 2022
4348778 - Unable to create a TD configuration because of forgotten password

After deploying the TD appliance and setting a custom integration password, it is not possible to create and set a configuration due to forgetting...

Revisado el: miércoles, 24 de agosto de 2022
4294587 - Unable to create a Search when entering data in the Permission field

When attempting to create a Search with some particular Permission filter, the result is blank

Revisado el: miércoles, 24 de agosto de 2022
4235728 - Unable to create a custom graphical Widget from a Search in the Change Auditor Web Client

An Administrator needs the ability to create Custom Graphical Widgets like Graphs, Charts, Running Totals and Object Groupings in the Change...

Revisado el: miércoles, 24 de agosto de 2022
4305031 - Unable to connect with Archive Database

Revisado el: miércoles, 24 de agosto de 2022
4232371 - Unable to connect to VMware for auditing using AD credentials

Revisado el: miércoles, 24 de agosto de 2022
4286920 - Unable to Connect to SQL Server

New install of Change Auditor 7.0.4 on a 2016 server connecting to a new SQL server running SQL 2017  After the install, it generated err...

Revisado el: miércoles, 24 de agosto de 2022
4233155 - Unable to connect to Archive database (Database Direct)

The client fails to connect to an archive database.  The following error is recorded in the Client NPTLog. message with Action 'ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4305826 - Unable to configure Azure Auditing Template Powershell

When attempting to configure a new Azure Auditing template using PowerShell, the creation fails with the error: New-CAAzureADTemplate : An...

Revisado el: miércoles, 24 de agosto de 2022
4292568 - Unable to configure Azure Auditing Template - An unexpected error occurred while executing a service call on agent

When attempting to configure a new Azure Auditing template, the creation fails with the error: An unexpected error occurred while executing a...

Revisado el: miércoles, 24 de agosto de 2022
4236445 - Unable to apply path suffix wildcard to File System protection template

File System Protection template is not allowing wild card to be added the same as can be done in the File Auditing template. For example: f...

Revisado el: miércoles, 24 de agosto de 2022
4235629 - Unable to aquire exclusive access to <component name>

When trying to access a section of the client, such as a search, Agent Configuration, Coordinator Configuration, etc, the following error is shown...

Revisado el: miércoles, 24 de agosto de 2022
4349008 - Unable to add a GMSA to the override account list on a protection template in Change Auditor

Is there any way to add or use a GMSA on the override list on a protection template?

Revisado el: miércoles, 24 de agosto de 2022
4259077 - Unable specify Restrictions value using Web Gui

The Restriction values is un-editable in web based Change Auditor When trying to make the change an error occurs

Revisado el: miércoles, 24 de agosto de 2022
4302759 - Turning on Debug mode for the ChangeAuditor Repository

This is used when more information is need about an error inside of the ChangeAuditor Repository.

Revisado el: miércoles, 24 de agosto de 2022
4300532 - trying to purge jobs, getting error msgs while trying to do it

Trying to run purge job, but getting error messages saying the job terminated, and events are not being purged.

Revisado el: miércoles, 24 de agosto de 2022
4249290 - Trying to audit changes made to Exchange attributes

Looking for changes made to Exchange attributes (such as the Mail attribute) on a user object but no results are returned.

Revisado el: miércoles, 24 de agosto de 2022
4312705 - Trusted for Delegation on Computer Objects

Auditors want us to detects Trusted for Delegation on both User & Computer objects. Unfortunately, Change Auditor only provides alert for User...

Revisado el: miércoles, 24 de agosto de 2022
4233500 - Truncating pending alerts in 6.x

In previous versions, you could run 'Select count (*) from dbo.alert.queue' and then truncate that table to clear out any pending alerts, however...

Revisado el: miércoles, 24 de agosto de 2022
4228118 - Truncated WHAT info in 'userworkstations' attribute event

Revisado el: miércoles, 24 de agosto de 2022
4288429 - Troubleshooting NetApp 7- Mode setup and configuration

Information to assist with the configuration of a NetApp 7-Moder template.

Revisado el: miércoles, 24 de agosto de 2022
4273953 - Troubleshooting NetApp Cluster Mode setup and configuration

Information to assist with the configuration of a NetApp Cluster Template

Revisado el: miércoles, 24 de agosto de 2022
4281914 - Troubleshooting Exchange Issues relating to OWA \EWS \ IIS

Troubleshooting steps and Logs Gathering for issues relating to the Change Auditor Agent impacting OWA \ Exchange Management Console Web...

Revisado el: miércoles, 24 de agosto de 2022
4236648 - Track user and administrator changes to printing

Change Auditor Administrators would like to receive events that cover printing area such as printer drivers changes, printing documents, changes...

Revisado el: miércoles, 24 de agosto de 2022
4227838 - Topology enhancement to see list of all agents and coordinators across all forests

In multi-forest deployments where there exists many forests with Coordinators/Agents deployed in each sharing a single SQL database the Change...

Revisado el: miércoles, 24 de agosto de 2022
4353219 - Timeout on usp_QueryTree stored procedure when opening when opening archive databases

Rare issue with ChangeAuditor Client hanging / timing out when when opening archive databases. With either an upgrade of the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4232394 - Timeout for Change Auditor Client

Compliance requires that all Client software must have a session timeout. 

Revisado el: miércoles, 24 de agosto de 2022
4351347 - Timeout errors when upgrading ChangeAuditor archive

Timeout errors when upgrading ChangeAuditor archive

Revisado el: miércoles, 24 de agosto de 2022
4244279 - Time zone variable for Alert Email not set correctly

Time zone variable for Alert Email not set correctly if Alert is enabled by right-clicking the Search. The correct Time Zone appears to be set...

Revisado el: miércoles, 24 de agosto de 2022
4305681 - threat detection module upgrade server

threat detection module upgrade server  needed for a security upgrade Upgrade failed with the error: [root@DCRX-AAS-P001 ~]# yum update Loaded...

Revisado el: miércoles, 24 de agosto de 2022
4306032 - There is no ChangeAuditor Coordinator Service after upgrading

After upgrading  ChangeAuditor, the following error is seen when  attempt to logon to the client: "The connection attempt lasted for a time span...

Revisado el: miércoles, 24 de agosto de 2022
4220113 - The “ChangeAuditor Agents” security group is only created in the domain where the Agent Installer is pointed when installed in foreign forest or workgroup computer

Consider the following scenario… Change Auditor coordinators are installed in a multi-domain forest. There are coordinators installed in the...

Revisado el: miércoles, 24 de agosto de 2022
4234837 - The Who is recorded as the System Account for "Site Collection deleted" events in Change Auditor

When "site collection is deleted " event is generated and recorded in Change Auditor, the System Account is displayed as the WHO for the event.

Revisado el: miércoles, 24 de agosto de 2022
4220829 - The Web Client doesn't auto-refresh the widgets or searches on the Overview page, or on the Shared Overview pages.

When using the Web Client, the Overviews and Shared Overviews do not auto-refresh.  In order to see new information, the Refresh button must be...

Revisado el: miércoles, 24 de agosto de 2022
4243335 - The user specified in the active connection profile is not a member of either the ChangeAuditor Administrators or ChangeAuditor Operators Roles.

The following message is presented when trying to log in to the Change Auditor client: "The user specified in the active connection profile is...

Revisado el: miércoles, 24 de agosto de 2022
4294187 - The timeout period elapsed while attempting to consume the pre-login handshake acknowledgement

Consider the scenario where the Coordinator stops immediately after starting and the following is logged in the Coordinator log: [INFO][Quest...

Revisado el: miércoles, 24 de agosto de 2022
4308220 - The Time Detected column doesn't export in Web Client for custom searches

When exporting search results to a csv, the "Time Detected" column (or any grouped-by or ordered-by column) doesn't export. This occurs only in the...

Revisado el: miércoles, 24 de agosto de 2022
4319395 - The sizes of the ScriptingAgentConfig.xml are not consistent across all Exchange servers with change Auditor installed.

An Exchange Administrator observed that the sizes of the ScriptingAgentConfig.xml are not consistent across all Exchange servers with agent Change...

Revisado el: miércoles, 24 de agosto de 2022
4315738 - The Search Filter of AD Queries is not displayed correctly in Change Auditor when running more complex LDAP queries

Change Auditor will not show the correct LDAP Search Filter for AD Queries when a more complex filter has been used. In the below example DSQUERY...

Revisado el: miércoles, 24 de agosto de 2022
4220744 - The Restore Value option on an Active Directory Group Membership change may remove all users.

Using the "Restore Value" option on a Member added to Group or Member removed from Group event may result in the group being left with zero members...

Revisado el: miércoles, 24 de agosto de 2022
4300206 - The Overview tab never loads completely, Real-Time Auditing is not available

The Overview tab never loads completely, (the loading icon just keeps spinning). Real-Time auditing is not available.

Revisado el: miércoles, 24 de agosto de 2022
4224620 - The Origin information in some User Lockout events shows a Domain Controller or Application server, rather than the user's workstation.

When a user mis-types their password, and locks themself out while attempting to log into their Windows desktop, a User Lockout event is created...

Revisado el: miércoles, 24 de agosto de 2022
4271761 - The difference between the WHO and WHAT tabs

What is the difference between the who and the what tabs on a search?

Revisado el: miércoles, 24 de agosto de 2022
4266344 - The difference between Who and What tabs

Revisado el: miércoles, 24 de agosto de 2022
4244181 - The Credentials for the account are not valid displayed when installing a Change Auditor Coordinator in a second forest

The following error is displayed when installing a new Change Auditor Coordinator in a different Active Directory Forest than the Forest the SQL...

Revisado el: miércoles, 24 de agosto de 2022
4223445 - The credentials test and scheduling agent installations fails while the remote installation succeeds

Consider the following case... User credentials are provided on the Change Auditor Deployment tab for an account that has Domain Admin rights...

Revisado el: miércoles, 24 de agosto de 2022
4306470 - The Client fails to connect to the Coordinator

An attempt to connect a Client  installed on a different Host than the Coordinator fails to connect. The message "The "Coordinator Credentials...

Revisado el: miércoles, 24 de agosto de 2022
4306453 - The Change Auditor Client does connect to the Coordinator

The Change Auditor Client does connect to the Coordinator. The following error is seen on the Client splash screen and is recorded in the...

Revisado el: miércoles, 24 de agosto de 2022
4294221 - The Change Auditor Web Client does not connect to the Coordinator after upgrade

The Change Auditor web client does connect to the Coordinator after the update to 6.5\6.6. The following error is recorded in the ChangeAuditorWeb...

Revisado el: miércoles, 24 de agosto de 2022
4288433 - The Change Auditor agent shows high CPU usage when the GPO Driver is disabled

The Change Auditor agent will consume excessive CPU when the GPO Driver is disabled. For Example, on a Windows 2012 R2 DC with minimal activity...

Revisado el: miércoles, 24 de agosto de 2022
4255429 - The Change Auditor Coordinator does not start due to the error "The computer is not in a site"

When trying to start the Change Auditor Coordinator, usually after a fresh install, it fails.  The Change Auditor Coordinator log displays the...

Revisado el: miércoles, 24 de agosto de 2022
4249517 - The Change Auditor win32 client (thick client) cannot connect to coordinators which belong to a multi-forest installation in 7.0.4 GA

After upgrading or installing Change Auditor 7.0.4 GA, and you are using a multi-forest installation, the following error is shown: "Change...

Revisado el: miércoles, 24 de agosto de 2022
4307632 - The CAADAMService.exe is causing a large amount of token renewals with SeSecurityPrivilege

The CAADAMService.exe is causing a large amount of token renewals with SeSecurityPrivilege and triggering event ID 4703 in AD LDS servers.

Revisado el: miércoles, 24 de agosto de 2022
4252495 - The auditing will include all of the path even if the path was not included in the audit template.

The auditing will include all of the path even if the path was not included in the audit template.

Revisado el: miércoles, 24 de agosto de 2022
4220739 - The automated Purge job can only purge events which are older than 1 week

Some customers may want to purge events from their production database that are younger than 1 week old.  Currently, this is not possible, as the...

Revisado el: miércoles, 24 de agosto de 2022
4312723 - The agent is not getting the file server license and is not auditing.

We installed ChangeAuditor on the domain in an isolated environment of the client. We have installed domain controller agent and it works without...

Revisado el: miércoles, 24 de agosto de 2022
4346867 - The account specified when you create a SQL DLA template requires sysadmin role.

Per the Change Auditor Release Notes, the required permissions SQL Data Level auditing templates require that the credentials for the account...

Revisado el: miércoles, 24 de agosto de 2022
4257235 - The "Knowledge Base" button on event details bar does not link to web page that shows the details for the event

The "Knowledge Base" button on event details bar does not link to web page that shows the details for the event.  The URL redirected to https...

Revisado el: miércoles, 24 de agosto de 2022
4255333 - Test SMTP button is available in the web client prior to SMTP information being configured

The 'Test SMTP' button is avaialble in the web client even when the Coordinator is not yet configured for SMTP.  At this point, the button should...

Revisado el: miércoles, 24 de agosto de 2022
4234971 - Target information missing from "Add unverified Domain" Azure event

When the "Add unverified Domain" Azure event is recorded in Change Auditor, the target information is not added to the event. When viewed in Azure...

Revisado el: miércoles, 24 de agosto de 2022
4317976 - System Crash When Using Virtualization Based Security

After installing and enabling the necessary prerequisites for Virtualization Based Security on Windows Server 2016, the system will crash. Applying...

Revisado el: miércoles, 24 de agosto de 2022
4294544 - SysAdmin role requirement for DLA auditing.

Explanation on why when doing SQL Data Level Auditing SysAdmin role is required and the actions performed and why?

Revisado el: miércoles, 24 de agosto de 2022
4236573 - Suppress "User failed to authentication through Kerberos” events

Many “User failed to authentication through Kerberos” events may be generated by service account (or similar) trying to authenticate with invalid...

Revisado el: miércoles, 24 de agosto de 2022
4234730 - Support for installing Change Auditor on Microsoft Windows Server 2016

When will support for installing Change Auditor on Microsoft Windows 2016 be available?

Revisado el: miércoles, 24 de agosto de 2022
4351278 - Support for Exchange 2016 CU22

When will Change Auditor support for Exchange 2016 CU22?

Revisado el: miércoles, 24 de agosto de 2022
4351124 - Support for Exchange 2016 CU19

When will Change Auditor support Exchange 2016 CU19 ?

Revisado el: miércoles, 24 de agosto de 2022
4320066 - How do I search for Group Policy Change events.

An administrator needs to search for Group Policy Change events but does not know how.

Revisado el: miércoles, 24 de agosto de 2022
4275971 - How do I search on changes made to all objects under an OU?

There is a need to search on all changes made to objects in an OU recursively.

Revisado el: miércoles, 24 de agosto de 2022
4234416 - How do I mount or connect to an archive database?

Revisado el: miércoles, 24 de agosto de 2022
4351143 - How do I install Change Auditor with the least privileges?

How do I install Change Auditor without logging in as a Domain Admin user?

Revisado el: miércoles, 24 de agosto de 2022
4255602 - How do I install ChangeAuditor to a Multi-Forest infrastructure?

Need to configure Change Auditor to audit domain events across multiple domains/forests.

Revisado el: miércoles, 24 de agosto de 2022
4219921 - How do I identify the oldest record in the ChangeAuditor Database without running a report

A Change Auditor Administrator may wish to find the oldest record in the Change Auditor database, however, running a report that would return all...

Revisado el: miércoles, 24 de agosto de 2022
4276036 - How do I exclude NULL Who entries?

Revisado el: miércoles, 24 de agosto de 2022
4237856 - How do I determine what objects and attributes are being audited by default?

Is there a list of Event Classes and Active Directory Attributes that are monitored by default?

Revisado el: miércoles, 24 de agosto de 2022
4320060 - How do I create an event alert for 'User account locked'

An administrator needs to receive an alert email when a user's account is locked.

Revisado el: miércoles, 24 de agosto de 2022
4346911 - How do I create a search to see file and folder access rights changes?

How do I create a search to see file and folder access rights changes?

Revisado el: miércoles, 24 de agosto de 2022
4320208 - How do I create a report on a specific attribute called msExchHideFromAddressLists

A user wishes to search and report on changes to an Active Directory user attribute called msExchHideFromAddressLists. 

Revisado el: miércoles, 24 de agosto de 2022
4235472 - How do I create a search for changes to the ObjectSID of a specific user account?

An administrator need to configure a Search/Alert for changes to the ObjectSID attribute of a specific user account.

Revisado el: miércoles, 24 de agosto de 2022
4320202 - How do I create a Change Auditor File System search filter that targets a specific file.

The document provide instructions on how to configure a Change Auditor File System search filter that targets a specific file.

Revisado el: miércoles, 24 de agosto de 2022
4224520 - How do I configure a search for events for members of a specific group.

Would like to be able to create a Search for events performed on the users who are members of a specific group.

Revisado el: miércoles, 24 de agosto de 2022
4238059 - How do I change the password for the account used by the Coordinator to access the database?

An administrator changed the Active Directory password for the account used by the Coordinator to access the database and needed to know how...

Revisado el: miércoles, 24 de agosto de 2022
4319738 - How do I change the certificate for the InTrust IT Search site

An administrator needs to change the certificate for the IT Search site and provide a more user friendly name (instead of the server name) for the...

Revisado el: miércoles, 24 de agosto de 2022
4270784 - How do I alert on computers being moved to or from an OU?

Revisado el: miércoles, 24 de agosto de 2022
4233915 - How do I alert on when an agent is having issues sending events or has become inactive?

There is a need for knowing when Change Auditor Agents go inactive and stop sending events, or stop auditing entirely.

Revisado el: miércoles, 24 de agosto de 2022
4319468 - How do I add a file exclusion to a file system search?

An administrator need to exclude a specific file when configuring a search on a target sub-folder.

Revisado el: miércoles, 24 de agosto de 2022
4344543 - How do Change Auditor Agent determine which Coordinators to connect to in Multi-Coordinator environments?

In a Multi-Coordinator environment, what logic does the Change Audit Agent use to determine to which Change Auditor Coordinator(s) it will connect...

Revisado el: miércoles, 24 de agosto de 2022
4348939 - How can I enable or disable auditing for certain event classes?

How can I enable or disable auditing for certain event classes?

Revisado el: miércoles, 24 de agosto de 2022
4234162 - How can I estimate Database Size for ChangeAuditor?

Revisado el: miércoles, 24 de agosto de 2022
4248307 - How can i customize searches to display object name or other attributes?

How can i customize searches to display object name or other attributes?

Revisado el: miércoles, 24 de agosto de 2022
4344540 - How can I create a QRadar event Subscription using the powershell modules?

I would like to use powershell to create my QRadar event subscription.

Revisado el: miércoles, 24 de agosto de 2022
4320853 - How can find all the listining ports for the Change Auditor Coordinator

An administrator needs to know how to find all the Coordinator listening ports to open in his DMZ Firewall for a server with a Change Auditor agent.

Revisado el: miércoles, 24 de agosto de 2022
4243137 - How can administrators control access to the ChangeAuditor Client and Web Client

How can administrators limit which users in the environment can login to the ChangeAuditor Client and Web Client.

Revisado el: miércoles, 24 de agosto de 2022
4255246 - How Azure AD auditing works in Change Auditor?

How to set up Azure AD auditing in Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4289001 - Hotfix Applied Events Not Showing Up 2012 and 2012R2 servers.

We provide a report from CA detailing the "Hotfix Applied" event for servers to our SOX auditors to demonstrate evidence of monthly patching. For...

Revisado el: miércoles, 24 de agosto de 2022
4224136 - High memory usage when McAfee Solidcore is installed

Machines with McAfee Solidcore and the CA Agent installed, may experience increasingly high memory usage (memory leak). Disabling the CA Agent...

Revisado el: miércoles, 24 de agosto de 2022
4294861 - High frequency of failed Agent Heartbeat Checks

Multiple ChangeAuditor Coordinators are recording frequent failed Heartbeat Checks for agents in their respective Coordinator logs, yet there is...

Revisado el: miércoles, 24 de agosto de 2022
4255713 - Having problems connecting to ChangeAuditor repository

When trying to connect to the Repository from the client you are denied the connection

Revisado el: miércoles, 24 de agosto de 2022
4318144 - Group Policy Protection Templates cannot be disabled at the template level in the Change Auditor Client

When Group Policy Protection Templates are configured to be stored in Active Directory, setting a Protection Template to "Disabled" is reset back...

Revisado el: miércoles, 24 de agosto de 2022
4225170 - Group Policy Protection isn't working

After setting up a Group Policy Object in a Protection Template, changes are still being allowed.

Revisado el: miércoles, 24 de agosto de 2022
4311804 - Group Policy change to Comment/Description not audited

Revisado el: miércoles, 24 de agosto de 2022
4254273 - Group Membership addition may not be recorded when the Active Directoy group is created using Active Roles Server

In Active Roles Server (ARS), when Active Directory groups are created and group members are added in the same transaction (using the New | Group...

Revisado el: miércoles, 24 de agosto de 2022
4282376 - Group Expansion workaround

When doing a search on the domain admins group activity, the search results shows a user who is not a member in the domain admins group, the user...

Revisado el: miércoles, 24 de agosto de 2022
4236591 - Group expansion on the WHO tab does not work in combination with ARS 'Include event source initiator' option

Consider the following scenario: Using Active Roles Server (ARS) integration and running a search which looks for users belonging to a group...

Revisado el: miércoles, 24 de agosto de 2022
4282223 - GPOs protected by Change Auditor, will no longer function properly if their settings are modified.

When modifying an existing value (Event Log Size) in the a protected GPO eg domain controller policy, you get an access denied to the inf. file...

Revisado el: miércoles, 24 de agosto de 2022
4233718 - GPOadmin 5.11 will not send initiator information to Change Auditor when installed on 2016 server

GPOadmin 5.11 will not send initiator information to Change Auditor when installed on 2016 server

Revisado el: miércoles, 24 de agosto de 2022
4224868 - As of Change Auditor 7.0.4, the Change Auditor Registry Driver is no longer able to load on Windows 2008R2 servers

As of Change Auditor 7.0.4, the Change Auditor Registry Driver is no longer able to load on Windows 2008R2 servers. Therefore, Registry auditing...

Revisado el: miércoles, 24 de agosto de 2022
4294379 - As CA Administrator, I want to opt out of the software improvement program by default for US, so that I was in compliance after client install.

Customer wants to opt out of the software improvement program by default when choosing United States.  Due to agent security guidelines, they...

Revisado el: miércoles, 24 de agosto de 2022
4233690 - As CA Operator, I want to see events for calendar modifications in resource mailboxes when handled by auto-attendant

As CA Operator, I want to see events for calendar modifications in resource mailboxes when handled by auto-attendant (MS Exchange Mailbox Assistant...

Revisado el: miércoles, 24 de agosto de 2022
4233597 - As CA Administrator, I want to see search name as the file name when exporting a search so that I know which search I exported when looking at the file name

As a Change Auditor Administrator I'd like for exported folders/searches to use the object name which was exported instead of the GUID for easier...

Revisado el: miércoles, 24 de agosto de 2022
4227964 - As CA Administrator, I can filter out AD Query events by exclusion templates before the event consolidation phase

As CA Administrator, I can filter out AD Query events by exclusion templates before the event consolidation phase.

Revisado el: miércoles, 24 de agosto de 2022
4227965 - As CA Administrator, I want to be able to specify which network card to use on the agent machine for communication with NetApp

As CA Administrator, I want to be able to specify which network card to use on the agent machine for communication with NetApp.

Revisado el: miércoles, 24 de agosto de 2022
4306768 - As a Change Auditor Administrator, I would like Workstation agents to monitor registry changes

Would like to know if the Workstation Agent once installed also monitors the registry changes as it does for the Member Servers.

Revisado el: miércoles, 24 de agosto de 2022
4303852 - As a Change Auditor administrator, I would like to see the IP addresses of all of the coordinators.

As a Change Auditor administrator, I would like to see the IP addresses of all of the coordinators on the Coordinator Statistics screen, as it is...

Revisado el: miércoles, 24 de agosto de 2022
4289088 - As a Change Auditor Administrator, I want the ability to create a report which shows the configuration settings

Want a report of Change Auditor configuration not just the xml file that can be created by an export.

Revisado el: miércoles, 24 de agosto de 2022
4236559 - As a Threat Detection Administrator I’d like the ability to set the SMART alert threshold value

In some scenarios (testing in particular) it may be desired to lower the SMART alert threshold value so that lower scoring activity will generate...

Revisado el: miércoles, 24 de agosto de 2022
4231012 - As a Change Auditor operator, I would like File System events to record the Windows DFS (Distributed File System) link used to access the share rather than the share path

Change Auditor does not show DFS links in file-system events, instead it shows the share name. This is confusing for users because they are not...

Revisado el: miércoles, 24 de agosto de 2022
4220614 - As a Change Auditor Administrator, I would like the ability to assign agents to a primary coordinator using the Agent Configuration in the Client

As a Change Auditor Administrator, I would like the ability to assign Agents to a specific  Coordinator using the Agent Configuration in the...

Revisado el: miércoles, 24 de agosto de 2022
4351166 - As a CA Administrator, I would like to be able to configure how often Change Auditor polls Azure Audit, Sign-in, and Risky Sign-in logs for new events

As a CA Administrator, I would like to be able to configure how often Change Auditor polls Azure Audit, Sign-in, and Risky Sign-in logs for new...

Revisado el: miércoles, 24 de agosto de 2022
4306959 - As a CA Operator, I would like to be able to configure scheduled reports to use 24-hour time format

Enhancement request: Would like my reports to have data in 24 hour format. 

Revisado el: miércoles, 24 de agosto de 2022
4294917 - As a CA Exchange Administrator, I would like contact changes to be fully audited

When auditing Exchange contacts such as the notes or email for these contacts by a non-owner not receiving any events for contact modified by non...

Revisado el: miércoles, 24 de agosto de 2022
4249327 - As a CA Administrator, I would like to use a minimally privileged account to facilitate O365 and Azure auditing

Currently, it is required that a Global Administrator account is specified during Azure and O365 template creation: Azure: A user account with...

Revisado el: miércoles, 24 de agosto de 2022
4237082 - As a Change Auditor Administrator I'd like to audit granting of Kerberos Service Tickets

As a Change Auditor Administrator I'd like to audit success/failure of granting Kerberos Service Tickets. Windows Security Log event ID equivalent...

Revisado el: miércoles, 24 de agosto de 2022
4236369 - As a CA Operator, I would like a specific event to identify when an AD user account changes their own password

We would like to have a Password changed by owner event to easily create searches, reports or alerts for when a user changes their own password.

Revisado el: miércoles, 24 de agosto de 2022
4234133 - As a CA Operator, I would like searches in the Win32 Client to return results as fast as the Web Client

Searches ran from the Web Client complete quicker than when the same search is run in the Win32 client.

Revisado el: miércoles, 24 de agosto de 2022
4233999 - As a CA Administrator, I would like to be able to select multiple objects in the Object picker of the Web Client by using the the keyboard

When using the Web Client you cannot select multiple objects in the object picker by using the arrow keys on the keyboard.

Revisado el: miércoles, 24 de agosto de 2022
4228018 - As a CA operator, I can see user display name in the alerts for "User added/removed to a group" events

Today, group membership events only include the user's logon (samAccountName). For example: "domain\User1 was added to group domain\domain...

Revisado el: miércoles, 24 de agosto de 2022
4227969 - As a Change Auditor Administrator I'd like the ability to purge events from a specified time range

As a Change Auditor Administrator I'd like the ability to purge events from a specified time-range. 

Revisado el: miércoles, 24 de agosto de 2022
4227823 - As a Change Auditor Administrator I'd like the ability to purge events older than specified number of hours

As a Change Auditor Administrator I'd like the ability to purge events from today as part of the purge job with the option to purge events older...

Revisado el: miércoles, 24 de agosto de 2022
4222093 - As a CA administrator, I would like to be able to search and filter events based on the Coordinator that received them

Currently, there is no method available to search, filter, or group events by the Coordinator that processed them. The Coordinator Statistics tab...

Revisado el: miércoles, 24 de agosto de 2022
4306579 - As a CA Administrator, I would like Internal events to track changes in the Application User Interface section of Change Auditor configuration

Events generated when the Application User Interface changes are done.

Revisado el: miércoles, 24 de agosto de 2022
4300721 - As a CA Administrator, I would like a special icon or visual cue in Active Directory Users and Computers indicating that an object is protected by Change Auditor

Enhancement request to have something  like a special icon or visual cue in Active Directory Users and Computers indicating that an object is...

Revisado el: miércoles, 24 de agosto de 2022
4300528 - As a CA administrator, I would like a notification in the Change Auditor client if a foreign forest cannot be contacted when performing a Force Refresh

When adding a foreign forest force refresh appears stuck as just a spinning wheel is displayed. In looking in the Coordinator log there is an...

Revisado el: miércoles, 24 de agosto de 2022
4233571 - As a CA Administrator, I can audit configuration changes to time service settings

As a CA Administrator, I can audit configuration changes to time service settings.

Revisado el: miércoles, 24 de agosto de 2022
4233543 - As a CA Administrator, I want to be able to configure the coordinator SMTP settings to use a non-standard port

As a CA Administrator, I want to be able to configure the coordinator SMTP settings to use a non-standard port.

Revisado el: miércoles, 24 de agosto de 2022
4219238 - As a CA Administrator, I would like the new columns selected the Agent Configuration page to not reset when moving to a different page of the Web Client

When adding or removing columns in the Web Client, if you go to a different page and then come back to the page where you modified the column...

Revisado el: miércoles, 24 de agosto de 2022
4306981 - As a CA Admin, I would like to see Internal Change Auditor events generated when a coordinator is unable to send events to a SIEM subscription.

ER: They are concerned with resiliency so when the Splunk event subscription didn't move over to another coordinator they either want a...

Revisado el: miércoles, 24 de agosto de 2022
4300379 - As a CA Administrator I would like to audit DNS-Integrated Sub-zones

CA is auditing on created and removed root level DNS zones, but would like to audit creation of DNS subzones. Even though all DNS service and DNS...

Revisado el: miércoles, 24 de agosto de 2022
4219636 - As a CA Administrator I want Azure/O365 agents to work even when they are behind an Internet proxy server

Some environments use a proxy server for Internet traffic. If the proxy requires authentication by a user account, this means that the Change...

Revisado el: miércoles, 24 de agosto de 2022
4329882 - ARS Initiator ID not populating

Initiator ID coming up blank when any change is done through the ARS console: The 'RemoteInstallService' log (found under C:\Windows\Temp\) on...

Revisado el: miércoles, 24 de agosto de 2022
4236761 - ARS Initiator information is not populated after applying recent Microsoft Patches

ARS Initiator information is not populated after applying Microsoft Patch KB3184471 to a Windows Domain Controller. In addition, the following...

Revisado el: miércoles, 24 de agosto de 2022
4230904 - ARS Integration broken if ChangeAuditor 6.0 Agent is upgraded or uninstalled from the ARS server

Consider the following scenario: 1. ActiveRoles Server 6.9 is installed with ChangeAuditor Integration deployed. The ActiveRoles server also has...

Revisado el: miércoles, 24 de agosto de 2022
4233794 - ARS / CA integration not working when override account is used

When ActiveRoles Server (ARS) uses an over-ride account for managing a domain the change is recorded in ChangeAuditor as "Source: ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4236806 - Are there any issues if the Domain Controllers use Bitlocker?

Will enabling Bitlocker on the DCs cause any issues with the CA agents collecting events?

Revisado el: miércoles, 24 de agosto de 2022
4315460 - Are there any differences between the Web Client and the Change Auditor Client (Thick Client)?

Are there features or functions in the the Thick Client that are missing from the Web Client?

Revisado el: miércoles, 24 de agosto de 2022
4255526 - Are there any errors in the logs would indicate the Coordinator has lost its connection to the database?

Can the Coordinator log be used to determine if the Coordinator no longer has a connection to the database?

Revisado el: miércoles, 24 de agosto de 2022
4307191 - Are SQL Alias supported by Change Auditor as connection to a SQL Server

Some customers might require to use SQL ALIAS as part of their setup for different reasons as shown in the present article

Revisado el: miércoles, 24 de agosto de 2022
4249298 - Are events lost when an agent looses connectivity to the coordinator?

If an agent cannot connect to a coordinator, are the events that occur during that time lost?

Revisado el: miércoles, 24 de agosto de 2022
4317838 - Archive for Deletion - Version no longer supported - 5.x Agents will not connect to 6.x Coordinator on Windows 2012

After upgrade from 5.9 to 6.0, the 5.x ChangeAuditor Agent will not connect to the 6.x Coordinator if the Coordinator is running on Windows 2012...

Revisado el: miércoles, 24 de agosto de 2022
4219616 - Archive job runs successfully but the current year archive is being created.

Data archiving was configured for current year (2019 for example) but no archive database was created for the current year. The Archive job runs...

Revisado el: miércoles, 24 de agosto de 2022
4236932 - Archive Databases will not upgrade. Error, "Database upgrade failed."

Attempt to upgrade an archive database running ChangeAuditor Client on Windows 2008 R2 server may fail immediately after clicking "OK" to perform...

Revisado el: miércoles, 24 de agosto de 2022
4300372 - An error occurred during Web App creation: Invalid username or password

When creating Office 365 or Azure template, the following error is showing: An error occurred during Web App creation: Invalid username or...

Revisado el: miércoles, 24 de agosto de 2022
4223340 - An error occurred during the installation of assembly component {844EFBA7-1C24-93B2-A01F-C8B3B9A1E18E}. HRESULT: 0x80070422

During Agent installation, a generic error is displayed in the Client.  When the Agent is installed manually, the following error is displayed in...

Revisado el: miércoles, 24 de agosto de 2022
4225259 - An error is encountered when trying to export

The following error is presented when trying to print search results: "The following error occurred while trying to print:  Can't export more...

Revisado el: miércoles, 24 de agosto de 2022
4235025 - An AD Subsystem search that contains specific Objects AND any LIKE objects will only return results for the specific Objects added, and nothing for the LIKE objects added.

An AD Subsystem search that contains specific Objects AND any LIKE objects will only return results for the specific Objects added, and nothing...

Revisado el: miércoles, 24 de agosto de 2022
4237134 - Allow SQL authentication when connecting to archive databases

Currently SQL Authentication option is only made available to the user if Windows Authentication fails during the initial connection attempt to...

Revisado el: miércoles, 24 de agosto de 2022
4234618 - Allow customization of the logo in the Change Auditor Web Client

It is not currently possible to modify the logo in the Change Auditor Web Client.

Revisado el: miércoles, 24 de agosto de 2022
4225153 - All domain controllers generated large dump files and memory usage spiked to 100%

Large dump files were generated under Program Files\Quest\ChangeAuditor\Agent\Plug-in for Active Directory\Dumps on every Domain Controller and...

Revisado el: miércoles, 24 de agosto de 2022
4300171 - INTERNAL - SQL DLA events may contain no WHO value, or incorrect WHO value when Bulk SQL Inserts occur

Change Auditor SQL Data Level auditing providing, either a blank or incorrect User name in the search results, particularilly during periods of...

Revisado el: miércoles, 24 de agosto de 2022
4249379 - Why is the Restore Value option not available for all ChangeAuditor events?

The Restore Value button appears on the tool bar on the Event Details pane for some ChangeAuditor events but not all events. The Restore Value...

Revisado el: miércoles, 24 de agosto de 2022
4316926 - Why is Quest requesting access to my Azure-tenant when I try to log-in to support with an Azure-AD account? "Read User profile of ALL users" is being requested

When a customer attempts to log-in to support.quest.com using Azure-AD credentials,  the "Read User profile of ALL users" permission is being...

Revisado el: miércoles, 24 de agosto de 2022
4276180 - Why is my Protection, File, Account Exclusion template still in affect after deleting it?

After deleting a template in ChangeAuditor it is still in affect on the servers with agents installed.

Revisado el: miércoles, 24 de agosto de 2022
4317884 - Why does the Change Auditor upgrade set the ChangeAuditor database Recovery model to Simple?

During the Change Auditor upgrade, no matter the current setting on the ChangeAuditor database Recovery model, the upgrade process will set the...

Revisado el: miércoles, 24 de agosto de 2022
4219853 - Why does some Change Auditor events in the Audit Events list show "Any License" for License Type?

Why some Events Classes has "Any License" for License Type.

Revisado el: miércoles, 24 de agosto de 2022
4284746 - Why does one see blank origins for some "User Account Locked" events?

When running a search for "User Account Locked" events, it is noticed that a few of them have a blank origin.

Revisado el: miércoles, 24 de agosto de 2022
4278231 - Why does ChangeAuditor For Exchange License count differ from the count shown in Domain Statistics tool

How does the ChangeAuditor exchange License count Differ from the Domain Statistics License count. When running the Domain Statistics tool from...

Revisado el: miércoles, 24 de agosto de 2022
4306335 - Why are SQL Object ID numbers reported instead of tablenames?

With Change Auditor for SQL, after enabling the Event Classes object creation and deletion with the Facility 'SQL Object Event', under the...

Revisado el: miércoles, 24 de agosto de 2022
4243215 - Why are all the QRadar custom fields not populated in the QRadar interface when integrated with Change Auditor?

When integrating Change Auditor with QRadar, administrators may notice that not all custom fields are populated for each event that QRadar receives...

Revisado el: miércoles, 24 de agosto de 2022
4237875 - Which URLs must Change Auditor have access to for integration with On Demand Audit

The Change Auditor Coordinator(s) and Change Auditor Client machine require access to a couple URLs to facilitate creation of the initial event...

Revisado el: miércoles, 24 de agosto de 2022
4231053 - Which URLs must Change Auditor have access to for cloud auditing

Which URLs must Change Auditor have access  to for cloud auditing?

Revisado el: miércoles, 24 de agosto de 2022
4346924 - Which IIS sub-components need to be installed for the Web-Client?

I would like to know which IIS sub-components need to be installed for the Web-Client to work properly.

Revisado el: miércoles, 24 de agosto de 2022
4319268 - Which groups are considered critical in the default "Critical Group Membership changes" search

Which groups are considered Critical in the default "Critical Group Membership changes" search?

Revisado el: miércoles, 24 de agosto de 2022
4237557 - Which ChangeAuditor database table in SQL shows all the active and inactive agent connections?

Administrators may want to query the Change Auditor database directly to determine agent status. Which ChangeAuditor database table in SQL shows...

Revisado el: miércoles, 24 de agosto de 2022
4243262 - Where is the SQL Connection string stored?

Where does the Coordinator read the SQL Connection string (including the the credentials)?

Revisado el: miércoles, 24 de agosto de 2022
4306804 - Where is the Count of events by User overview in Change Auditor 6.8

Previously there was a count of events by user widget in change auditor 5.x  I do not see this widget in 6.x

Revisado el: miércoles, 24 de agosto de 2022
4280646 - Where can I find the agent install files?

Revisado el: miércoles, 24 de agosto de 2022
4236580 - Where can I find the ChangeAuditor Agent installation package

Revisado el: miércoles, 24 de agosto de 2022
4300351 - Password changes in AD are showing up in the “Who” section as “NT Authority\Anonymous Logon"

Password changes in AD are showing up in the “Who” section as “NT Authority\Anonymous Logon instead of the actual user who changed the password.

Revisado el: miércoles, 24 de agosto de 2022
4346946 - Password change events not showing who information

Revisado el: miércoles, 24 de agosto de 2022
4231136 - Outlook connectivity issues running ChangeAuditor 6.0

Revisado el: miércoles, 24 de agosto de 2022
4243181 - Origin value on lockout events shows a name that is not valid

When reviewing lockout events the Origin value may show a name that is not valid.

Revisado el: miércoles, 24 de agosto de 2022
4288884 - Operators cannot create or edit searches

After a user has been added to the ChangeAuditor Operators - <installation name> group in Active Directory, the user is unable (has no permission...

Revisado el: miércoles, 24 de agosto de 2022
4288234 - Operators cannot modify an existing or new Shared search.

Operator role does not have the capability to modify a search limiting the operator's capability to adjust search parameters as required.

Revisado el: miércoles, 24 de agosto de 2022
4292892 - Operating system and database requirements for Change Auditor server

What versions are supported for CHA v.7.2 installation - Operating System - Database

Revisado el: miércoles, 24 de agosto de 2022
4227926 - Opening Change Auditor client fails with error, "Requested registry access is not allowed"

Opening Change Auditor client fails with error, "Requested registry access is not allowed".

Revisado el: miércoles, 24 de agosto de 2022
4300334 - Only User failed to authenticate through Kerberos logon events are audited and returned in a search

When searching for logon activity only 'User failed to authenticate through Kerberos' events are visible. There are not any successful 'User...

Revisado el: miércoles, 24 de agosto de 2022
4235873 - On Demand Audit (ODA) subscription no longer available after coordinator has been replaced

If the only coordinator in a single coordinator Installation is deprecated and replaced by a new coordinator an existing On Demand Audit (ODA...

Revisado el: miércoles, 24 de agosto de 2022
4300672 - Office 365 error

When building an office 365 template I am getting the error An Agent matching the information provided could not be found.

Revisado el: miércoles, 24 de agosto de 2022
4255533 - Obsolete connection profiles exist. How to manually remove Coordinator SCP objects

When connecting to the Change Auditor Client,  there may be multiple  Coordinator profiles available. In this scenario, the additional...

Revisado el: miércoles, 24 de agosto de 2022
4282250 - Object restored through Recovery Manager for AD are not picked up by change auditor

Objects are restored using RMAD ,but corresponding events are not visible in Change auditor. This impacts 2012 R2 DCs and Domain level only...

Revisado el: miércoles, 24 de agosto de 2022
4255393 - Object reference not set to an instance of an object error when creating a search in an Archive database

A user is presented with the following error when attempting to create a search in a Change Auditor Client with a Data Direct Connection to an...

Revisado el: miércoles, 24 de agosto de 2022
4346886 - Object reference not set to an instance of an object

When you try to export results of CA search to either csv or pdf in the web-client with the description field added to the search layout, you...

Revisado el: miércoles, 24 de agosto de 2022
4236820 - O365/Azure error, "User realm discovery failed"

The following error is found in the Change Auditor agent "MicrosoftCloudPlugins.Log.nptlog" MicrosoftCloud.Service...

Revisado el: miércoles, 24 de agosto de 2022
4305692 - O365 template now require Certificate Authentication

After the upgrade to 7.2, now the Office 365 template requires certificate authentication.

Revisado el: miércoles, 24 de agosto de 2022
4286690 - O365 non owner events missing.

On reviewing the microsoftCloudplugins.Log on the agent server the following error is seen: Message: Can't find mailbox type entry for xxxxx Or...

Revisado el: miércoles, 24 de agosto de 2022
4225428 - O365 Auditing Template Overwriting Office 365 Native Audit Settings

When an O365 template is applied to an agent, and the template enabled, any existing native Office 365 settings are overwritten.

Revisado el: miércoles, 24 de agosto de 2022
4307211 - Not receiving any Logon Activity events

Not receiving any Logon Activity events even though Change Auditor is licensed for Logon Activity. Running the built-in Searches "Logon Activity...

Revisado el: miércoles, 24 de agosto de 2022
4236853 - Not receiving events for protected file-system paths even though attempted changes are blocked

Not receiving events for protected file-system paths even though attempted changes are blocked. 

Revisado el: miércoles, 24 de agosto de 2022
4233755 - Not receiving events after applying appropriate license

After supplying new licenses (either for a new module or because old licenses expired) no events are logged on the coordinator. The Agent(s) has...

Revisado el: miércoles, 24 de agosto de 2022
4288550 - Not getting correct "who" value for Exchange Mailbox changes.

After upgrading the Exchange Server from 2007 to 2013 not getting the correct "who" value for Exchange User events.  All Exchange 2013 servers and...

Revisado el: miércoles, 24 de agosto de 2022
4244885 - Not all NetAPP cluster volumes are detected and audited by Change Auditor

Not all NetAPP cluster volumes are detected and audited by Change Auditor. A warning similar to the following is recorded in the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4228208 - Not all Change Auditor Agents are displayed in the SharePoint Template wizard

When configuring a SharePoint template in the Change Auditor Client, the wizard will show you which agents are able to be enabled for SharePoint...

Revisado el: miércoles, 24 de agosto de 2022
4242976 - Non-owner events not generated when restoring items from backup in Exchange

When restoring items from backup in Exchange using the "New-MailboxRestoreRequest" cmdlet, non-owner events such as "Object Created by Non-owner...

Revisado el: miércoles, 24 de agosto de 2022
4237817 - No user logon activity data being recorded

No logon activity is being gathered. The report runs but produces zero results.

Revisado el: miércoles, 24 de agosto de 2022
4230863 - No Protection audit event is generated when a group policy change is attempted by the SYSTEM account

No audit event is generated when a group policy change made by the SYSTEM account (ie. the computer account) is blocked by Group Policy protection.

Revisado el: miércoles, 24 de agosto de 2022
4254353 - No option to Print Search results from the ChangeAuditor Web Client

When running a Search in the Change Auditor Web Client, there is no Print button that allows the user to save the Search results.

Revisado el: miércoles, 24 de agosto de 2022
4300860 - No O365 events for mailbox deletion.

No events are generating after deleting O365 mailbox using ECP.

Revisado el: miércoles, 24 de agosto de 2022
4234328 - No longer getting email alerts from Change Auditor

Running the search that an alert is associated with does return results, however email alerts, that did work previously, are no longer being sent.

Revisado el: miércoles, 24 de agosto de 2022
4227949 - No Kerberos events are audited on Windows 2012R2 after KB4054519 is installed

After installing update KB4054519 on Windows 2012R2 DC, Kerberos events are no longer captured. The following warning may be found in the CaadHook...

Revisado el: miércoles, 24 de agosto de 2022
4300270 - No events are being recorded by Change Auditor agent configured for EMC events.

EMC Audit template appears to be correctly configured but the Change Auditor agent is not recording events.  

Revisado el: miércoles, 24 de agosto de 2022
4294799 - No events coming from SQL agent

The Change Auditor Agent is running and connected but there is no events on the coordinator coming from particular Agent On the Agent Status...

Revisado el: miércoles, 24 de agosto de 2022
4294432 - No Events are being recorded

Applied the Defender License but not receiving any events.

Revisado el: miércoles, 24 de agosto de 2022
4236635 - No event logged if a user password is changed to the same password.

If you change the password of a user to the same password that is currently used, CA does not report any type of event.

Revisado el: miércoles, 24 de agosto de 2022
4224230 - Newly installed Coordinator will not stay running or fully initialize

After successfully installing, the Coordinator status is shown as stopped. Trying to manually start the service results in it stopping.  The...

Revisado el: miércoles, 24 de agosto de 2022
4349024 - New Subnet added events do not show which site the subnet is being added to.

When a new subnet is created in AD, no event is generated to show which site it's been added to in CA.

Revisado el: miércoles, 24 de agosto de 2022
4313018 - New events are not displayed in the Change Auditor Client

New events are not displayed in the Change Auditor Client even though the Change Auditor agents are connected and reporting to the Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4218727 - New events are not appearing in Change Auditor

No new events are appearing in Change Auditor, even after deliberate actions are taken that would normally trigger an event. The following error...

Revisado el: miércoles, 24 de agosto de 2022
4234167 - New coordinator is unable to decrypt existing stored credentials

Consider the following: Change Auditor Coordinator is installed and running on Server1 There are encrypted credentials stored by Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4273907 - New Agents Fail to connect to a new Coordinator Installation - Failed to open connection to coordinator at endpoint

In a new Installation of Change Auditor, the Agents are not connecting to the Coordinator. Upon reviewing the ChangeAuditor.dll.nptlog the...

Revisado el: miércoles, 24 de agosto de 2022
4220771 - New Archive database is not being created

When attempting to run an archive job through ChangeAuditor, and a new database is expected to be created based on the Archive Task rules, the...

Revisado el: miércoles, 24 de agosto de 2022
4318254 - Network Path not found error when deploying agents

Deploying Change Auditor agents to some servers may result in the error: "Network Path not found"

Revisado el: miércoles, 24 de agosto de 2022
4236572 - NetApp volumes added for monitoring do not create any events

Recently added NetApp volumes added for monitoring do not create any events. The template appears correct and there are no errors on the Agent or...

Revisado el: miércoles, 24 de agosto de 2022
4232404 - NetApp Searches/Reports never finish

When running searches/reports against NetApp data the searches never finish.

Revisado el: miércoles, 24 de agosto de 2022
4231204 - NetApp template credentials fail with error "Authentication failed because the remote party has closed the transport stream"

Attempting to check the filer mode using valid credentials or storing valid credentials for selected agents fails with error: "Authentication...

Revisado el: miércoles, 24 de agosto de 2022
4289301 - NetApp Auditing Agent causes excessive latency on NetApp filer.

Suddenly last Thursday morning @ about 9:00 AM, we noticed CIFS volume latency skyrocket to 180ms and remain that way through out the day. It went...

Revisado el: miércoles, 24 de agosto de 2022
4270780 - NetApp events are not audited by ChangeAuditor

ChangeAuditor for NetApp is not auditing any NetApp events.

Revisado el: miércoles, 24 de agosto de 2022
4249415 - NetApp agent log has numerous 'Unsupported object type 'STREAM' encountered' error messages

NetApp agent log has numerous 'Unsupported object type 'STREAM' encountered' error messages

Revisado el: miércoles, 24 de agosto de 2022
4225169 - Netapp File server not generating events

The following error appears in the Change Auditor Agent log: 2015-09-28 10:43:51.645 [4916][WARN][CNetAppDirectSink::FPolicyInstance::KeepAlive...

Revisado el: miércoles, 24 de agosto de 2022
4220572 - NetApp events not recorded in Change Auditor

NetApp events not recorded in Change Auditor and the following is recorded in the Change Auditor Agent log: 2016-08-23 05:54:13.175 [5700][WARN...

Revisado el: miércoles, 24 de agosto de 2022
4230721 - Need to monitor file changes made within the SYSVOL directory

In some cases you may want to monitor files located in %systemdirve%\sysvol\sysvol directory for any changes.

Revisado el: miércoles, 24 de agosto de 2022
4255667 - need to know what all event types it supports

Which GPO and Computer Events are supported under Change Auditor for Active Directory License?

Revisado el: miércoles, 24 de agosto de 2022
4244397 - Need to find a way to do audit member added to group not containing specific characters

Need to audit events from specific group which are not like containing certain characters

Revisado el: miércoles, 24 de agosto de 2022
4305084 - Need confirmation that the customer can not access or manipulate the source code of ChangeAuditor

The request came from our Audit team and the auditors are looking for attest from the quest that the customer can not access or manipulate the...

Revisado el: miércoles, 24 de agosto de 2022
4228220 - My Change Auditor license won't apply.

When trying to apply the Change Auditor license to ChangeAuditor 5.x or newer, the license fails to apply with error stating no valid license...

Revisado el: miércoles, 24 de agosto de 2022
4329424 - Multiple restrictions on same event class does not work in a search.

Consider the following scenario: 1. Create a search for an event class (file renamed) and specify a restriction 2. The restriction only allows...

Revisado el: miércoles, 24 de agosto de 2022
4298608 - Multiple search reports in a single email

Is there any way to consolidate several search reports into a single email?

Revisado el: miércoles, 24 de agosto de 2022
4304294 - Multiple Event ID 4703 being logged in Security Event Log

The Windows Security event log is filling with Event ID 4703 on servers running the Change Auditor agent. The Change Auditor agent, NPSrvHost.exe...

Revisado el: miércoles, 24 de agosto de 2022
4236216 - Multiple Coordinators display different statistics on the Coordinator Satistics page

When more than one Coordinator is deployed the "Coordinator Statistics" page displays different values for most columns.

Revisado el: miércoles, 24 de agosto de 2022
4348996 - Multi Factor Authentication

Does Change Auditor support any type of Multi-Factor Authentication for loging into the client and/or web-client.

Revisado el: miércoles, 24 de agosto de 2022
4344599 - Moving the Change Auditor SQL Database Files (MDF and LDF) to a Different Drive

There may be a requirement to move the MDF and LDF files for the Change Auditor database to a different drive or different file path due to space...

Revisado el: miércoles, 24 de agosto de 2022
4351295 - Moved the coordinator server and now the Web Client no longer works

After moving the coordinator server to another server, or performing an in-place upgrade, the web client no longer works.

Revisado el: miércoles, 24 de agosto de 2022
4280341 - Move old database and access it as an archive

How to access an old database as an archive

Revisado el: miércoles, 24 de agosto de 2022
4288865 - Monthly Change Auditor Purge job does not run

When scheduling a monthly Purge job in ChangeAuditor Client, the job status never changes from "Never Run".

Revisado el: miércoles, 24 de agosto de 2022
4237268 - Modified events for Logon Attributes are recorded in the "InTrust for AD" event log

Modified events for Logon Attributes are recorded in the "InTrust for AD" event log even though auditing for the attributes are not enabled in...

Revisado el: miércoles, 24 de agosto de 2022
4234877 - Modification of protected Group object using back-link attributes produces unexpected text instead of the group name in the access denied pop-up

Modification of protected Group object using back-link attributes produces unexpected text instead of the group name in the access denied pop-up.

Revisado el: miércoles, 24 de agosto de 2022
4257608 - Missing UserName/DisplayName information in Notifications on Modified User Account Property

Post upgrade to 7.X it appears that some descriptive values in the notifications that monitor AD accounts that changes that have been made aren't...

Revisado el: miércoles, 24 de agosto de 2022
4224144 - Missing successful "Folder Open" event when a user expands a mapped drive

When a user expands a mapped drive in Windows File Explorer and access a folder, Change Auditor may not log a successful Folder Open event.

Revisado el: miércoles, 24 de agosto de 2022
4288340 - Misleading interval event keeps coming in logs in Alert

Every hour, the following event is being logged in Change Auditor : The auditing configuration on mailbox Vincent Thompson (VThompson@domain...

Revisado el: miércoles, 24 de agosto de 2022
4300111 - Alerts reporting on LASTLOGON attribute changes for Domain Controllers

I have Alerts created and running successfully for years. Recently Upgraded a Domain Controller to Agent version 6.5.152 And Account that...

Revisado el: miércoles, 24 de agosto de 2022
4257064 - Alerts not sending to Mail Enabled Groups

Alerts not sending to Mail Enabled Groups

Revisado el: miércoles, 24 de agosto de 2022
4243312 - Alert on when a Search or Alert is changed

Is there a way to report on when an existing alert or search is changed, disabled, deleted, created, etc?

Revisado el: miércoles, 24 de agosto de 2022
4237684 - Alert on if a user object was created and then deleted

Can ChangeAuditor alert on suspicious behavior such as if an AD account is created and then removed a short time later?

Revisado el: miércoles, 24 de agosto de 2022
4236551 - Alert variables for Azure AD properties do not display values in Alert email

There are several Azure AD alert variables available to add to alert email. However, none of the variables appear to work correctly and display...

Revisado el: miércoles, 24 de agosto de 2022
4233590 - Alert history reporting in ChangeAuditor

Revisado el: miércoles, 24 de agosto de 2022
4315935 - Alert Evaluation Frequency setting no longer exists in 6.x

Change Auditor 6.x no longer has "Evaluation Frequency" setting for SMTP alerts 

Revisado el: miércoles, 24 de agosto de 2022
4306499 - Alert for only when a change occurs in a specific folder.

File System alerting sends out an alert every time a change occurs to a file or folder in any audited path, so how can the alert be configured to...

Revisado el: miércoles, 24 de agosto de 2022
4300033 - Alert for only when a change occurs on a specific server

File System alerting send out an alert email every time a change occurs to a file or folder in any audited path, so how can the alert be configured...

Revisado el: miércoles, 24 de agosto de 2022
4233696 - Alert body configuration variables

Revisado el: miércoles, 24 de agosto de 2022
4294525 - Agents timeout when configuring o365/Azure connections

When configuring Azure/O365, the account is provided with Global Admin creds and agent selected. Agent throws message that the agent did not...

Revisado el: miércoles, 24 de agosto de 2022
4315592 - Agents on 2016 DCs is not capturing AD events

After applying the latest MSFT updates, 2016 DCs are no longer capturing AD events, but may be capturing other events such as DNS

Revisado el: miércoles, 24 de agosto de 2022
4233659 - Agents not connecting to Coordinator with error message: The target principle name is incorrect

Agents may show as inactive within the CA client but are started and running on the server(s). Investigation of the AgentServiceProxy.nptlog file...

Revisado el: miércoles, 24 de agosto de 2022
4219623 - Agents no longer recording events since moving the Coordinator.

An administrator recently migrated the Change Auditor database and Coordinator to a new server, however some agents are lo longer recording events.

Revisado el: miércoles, 24 de agosto de 2022
4346899 - Agents are extremely slow to start on member servers

After installing the CAAD agent on a member server, it is loading very slowly when we restart the agent. It takes between 20 and 80 minutes to...

Revisado el: miércoles, 24 de agosto de 2022
4306612 - Agents are not connecting to the Coordinator

Consider the following scenario Agent cannot connect to the Coordinator with the following error in the ChangeAuditor.dll.nptlog [WARN...

Revisado el: miércoles, 24 de agosto de 2022
4255529 - Agents are showing as Inactive in the Change Auditor Client

Agents are not connecting to the Coordinator and show as Inactive in the Agent Statistics.

Revisado el: miércoles, 24 de agosto de 2022
4225265 - Agents are unable to maintain a connection to the Coordinator

The following warnings are seen in the Change Auditor Agent logs: "A channel fault has occurred in Coordinator connection" "Marking Coordinator...

Revisado el: miércoles, 24 de agosto de 2022
4220331 - Agents are showing as Inactive or not sending events

After successfully installing the agents, some or all show as Inactive or are not sending events to the Coordinator. Looking at the Agent Status...

Revisado el: miércoles, 24 de agosto de 2022
4271739 - Agent will not uninstall looking for the MSI file

Revisado el: miércoles, 24 de agosto de 2022
4243409 - Agent will not stay running

After starting the agent, it stops shortly afterwards. The agent log file has the following logged: ERROR][CServicesHook::InstallHook(306...

Revisado el: miércoles, 24 de agosto de 2022
4210286 - Agent Upgrade or Uninstall Problem

Revisado el: miércoles, 24 de agosto de 2022
4294498 - Agent status in Client is inactive on Agent says it is running but not sending events.

After a server reboot of the Coordinator agents are showing inactive in the Client.  When going on to the agent servers the Agent status is...

Revisado el: miércoles, 24 de agosto de 2022
4300365 - Agent not collecting events, events lost during downtime?

we realized that the application did not collect any Log during this downtime. can you tell me how to get these logs. thank you in advance for your...

Revisado el: miércoles, 24 de agosto de 2022
4300302 - Agent on Windows Server 2016 Host will not connect to the Coordinator

Customer has a new 2016 server that when the agent is installed it says that it is running however it never connects to the coordinator. The...

Revisado el: miércoles, 24 de agosto de 2022
4306242 - Agent is slow to initialize

After restarting the Agent, it takes a long time to initialize, or does not initialize at all. The following entry is noted in the Agent log...

Revisado el: miércoles, 24 de agosto de 2022
4288333 - Agent is not deploying automatically after an error

After a failed attempt to deploy Agents across the environment, if a requirement is missed, Change Auditor will not reattempt to deploy the...

Revisado el: miércoles, 24 de agosto de 2022
4255503 - Agent is not restarted when option is set to restart agent if it is inactive for x minutes

Agent Heartbeat Check: If the "Agent goes offline after being inactive for" option is set to 5 minutes and the "Coordinator should try to...

Revisado el: miércoles, 24 de agosto de 2022
4236011 - Agent installer always creates a security group "ChangeAuditor Agents - DEFAULT"

During agent installer on workgroup or foreign forest computer the installer always creates the security group "ChangeAuditor Agents - DEFAULT" in...

Revisado el: miércoles, 24 de agosto de 2022
4236658 - Agent install error, "Error 1402. Could not open key: UNKNOWN\Components\GUID\GUID\

When attempting to upgrade or install ChangeAuditor Agent via the MSI you recieve the following warning and then the installer rolls back: "Error...

Revisado el: miércoles, 24 de agosto de 2022
4300413 - Agent Failed to connect to coordinator

Revisado el: miércoles, 24 de agosto de 2022
4300179 - Agent fails to start with 'Foreign root domain not set'

ChangeAuditor Agent successfully deployed, but the agent status is displayed as "Never". ChangeAuditor Agent service would not stay running...

Revisado el: miércoles, 24 de agosto de 2022
4316978 - Agent dll cannot be loaded

Agent dll cannot be loaded The Change Auditor Agent log or the Windows Event log show that one or more DLL-files pertaining to Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4308205 - Agent does not capturing AD events when Azure/O365 template is applied

When running Azure and/or Office 365 auditing on a domain controller in a hybrid environment, you may receive Azure AD and O365 events, but not on...

Revisado el: miércoles, 24 de agosto de 2022
4231029 - Agent deployment stuck in " "Executing Installer"

Revisado el: miércoles, 24 de agosto de 2022
4294066 - Agent deadlock may occur when Coordinator connection is interrupted

The Agent may end up in a deadlock situation when the connection to the Coordinator is interrupted. Agent logs show that it enters the...

Revisado el: miércoles, 24 de agosto de 2022
4266355 - Agent Deployment Fails Access Denied

Agent deployment fails with access denied message in the client. The log states "The semaphore timeout period has expired."

Revisado el: miércoles, 24 de agosto de 2022
4250708 - Agent count discrepancy in CA

Agent count discrepancy in CA Coordinator status, Agent Statistics Window and Overview Wizard

Revisado el: miércoles, 24 de agosto de 2022
4233645 - Agent cannot connect from DMZ. Error, "Error binding to rootDSE: 8007203a"

Agent cannot connect from DMZ. Error, "Error binding to rootDSE: 8007203a"

Revisado el: miércoles, 24 de agosto de 2022
4227775 - Agent Deployment fails with error related to Microsoft Core XML Services (MSXML) 6.0

Agent deployment from ChangeAuditor Client to remote servers fails with error "An unknown failure during deployment occured. If this is the first...

Revisado el: miércoles, 24 de agosto de 2022
4303578 - Agent Attempts to Connect to Non-Existent Repository

Agent attempts to connect to repository service that no longer exists. The following warning appears in the ChangeAuditor.dll.nptlog logfile...

Revisado el: miércoles, 24 de agosto de 2022
4255439 - Agent auto deployment does not occur after initial deployment attempt fails

If agent auto deployment is configured, but the initial installation fails due to pre-requisites not being met, the agent does not auto deploy...

Revisado el: miércoles, 24 de agosto de 2022
4233572 - Agent can't connect to the coordinator from behind firewall with error, "The socket connection was aborted"

Agents located behind firewall fail to connect to the coordinator with error found in the AgentServiceProxy.log.nptlog exception tab similar to...

Revisado el: miércoles, 24 de agosto de 2022
4288461 - After upgrading, I do not see "run local " option to preview a report.

After upgrading, I do not see "run local " option when trying to generate a search report

Revisado el: miércoles, 24 de agosto de 2022
4294718 - After upgrading to 7.0.2 or later, the agent may not stay running

After upgrading to 7.0.2 or later the agent service may not be able to stay running The following errors are found in the Agent log: "Failed to...

Revisado el: miércoles, 24 de agosto de 2022
4255407 - After upgrading to 7.x, the user field in events no longer displays the actual user name

After upgrading to 7.x, the user field of events in the Searches, Reports and Alerts no longer show the actual user name but something similar to...

Revisado el: miércoles, 24 de agosto de 2022
4249549 - After upgrading to 7.2 members of the Change Auditor Operators group can no longer login to the client

Following an upgrade to 7.2, when members of the Change Auditor Operators group try to launch the Win32 client, the following error may be shown...

Revisado el: miércoles, 24 de agosto de 2022
4249404 - After upgrading Change Auditor an attempt to uninstall/upgrade the previous version agent failed with error status 1603.

After upgrading CA an attempt to uninstall the previous version agent failed with error status 1603. Rebooting the server did not resolve the...

Revisado el: miércoles, 24 de agosto de 2022
4237831 - After moving the Change Auditor database to a new SQL Server, the Coordinator starts/stops with the error; Database collation differs from server collation.

Consider the scenario of moving the Change Auditor database to a new SQL Server, in this case SQL Server 2014 SP2, and the Coordinator starts...

Revisado el: miércoles, 24 de agosto de 2022
4220735 - After modifying the IFS share name for EMC Isilon permission changes are not audited

If the default file path (..\ifs\..) is modified (for example to ..\ifs$\..), no file permission changes are able to be audited.  The following...

Revisado el: miércoles, 24 de agosto de 2022
4284884 - After changing the ChangeAuditor Coordinator computer NETBIOS name, Client and Agents cannot connect.

After the computer name (machine name, NETBIOS) of the ChangeAuditor Coordinator is changed, the ChangeAuditor Agent and ChangeAuditor client may...

Revisado el: miércoles, 24 de agosto de 2022
4288916 - After CA upgrade, unable to send/receive CA alerts and SSRS reporting function not working correctly

When connecting to the Web Client after entering credentials receiving Sorry. error processing the request is received and you are returned to the...

Revisado el: miércoles, 24 de agosto de 2022
4238073 - After archiving and/or purging events, the database is still the same size

After setting up an archive or purge job to delete older events from the Change Auditor database, the size of the database does not appear to...

Revisado el: miércoles, 24 de agosto de 2022
4231167 - After applying a new license in the License Manager the license count does not update in the Change Auditor Client

After applying a new license in the License Manager the license count does not update in the Change Auditor Client

Revisado el: miércoles, 24 de agosto de 2022
4222674 - After agent installation on Exhange CAS role OWA http request returns "Outlook Web Access enco

After deploying ChangeAuditor agent to your Exchange CAS OWA server the errors below are displayed in the browser:  "Outlook Web Access...

Revisado el: miércoles, 24 de agosto de 2022
4289175 - After a fresh install of the Change Auditor Coordinator, the Coordinator will not stay running

After a fresh install of the Change Auditor Coordinator, the Coordinator will not stay running and attempts to restart the Coordinator fail. The...

Revisado el: miércoles, 24 de agosto de 2022
4256443 - After 7.2 Upgrade of Web Client , it is crashing and giving error : Index was outside the bounds of the array

While upgrading our 7.0.3 CA platform to 7.2, Coordinator and Client upgraded successfully with no issue. However, we see an issue with the 'Quest...

Revisado el: miércoles, 24 de agosto de 2022
4311793 - Administration tasks tab slow to open and Audit Events does not populate

Administration tasks tab slow to open and Audit Events does not populate

Revisado el: miércoles, 24 de agosto de 2022
4235583 - Administration Tasks tab is non-responsive

When in the Change Auditor Client, the Administration Tasks tab may continually become non-responsive. The following is recorded in the Change...

Revisado el: miércoles, 24 de agosto de 2022
4264606 - Administration and Deployment tab is grayed / greyed out.

The "Administration" and "Deployment" tab is grayed/greyed out and the following have been verified: - The user is belong to the ChangeAuditor...

Revisado el: miércoles, 24 de agosto de 2022
4289106 - ADFS module is throwing error messages.

Revisado el: miércoles, 24 de agosto de 2022
4227917 - Additional options available for the Audit Event result type

Under Administration/Audit events there are 4 options for audited result type: All results, S uccess only, Success and protected only...

Revisado el: miércoles, 24 de agosto de 2022
4288721 - Adding users to a group using timed membership option does not show up correctly.

When adding a member to a group with the TimeToLive option in Windows 2016 for temporary group membership, Change Auditor does not record the event...

Revisado el: miércoles, 24 de agosto de 2022
4288596 - Adding new components after upgrade to 6.x requires 6.x licensing not 5.x.

Upgraded 5.x  Change Auditor for AD and Exchange to version 6.0.  Migrated to a new domain, and need to reinstall the software on a new server...

Revisado el: miércoles, 24 de agosto de 2022
4278191 - Adding Folders to Exclusions Tab on File System Auditing template

When creating a File System Auditing template, there may be a need to add a Folder on the Exclusion tab even though the start of the folder path...

Revisado el: miércoles, 24 de agosto de 2022
4351150 - Adding Azure Active Directory template

"Change Auditor has encountered an error processing this request." When attempting to setup a template for the first time.

Revisado el: miércoles, 24 de agosto de 2022
4305534 - Adding a filter into SQL template “Net SqlClient Data Provider” does not filter out

A filter was added to the SQL template for filtering out all .net applications, the filter added was “.Net SqlClient Data Provider”. On testing...

Revisado el: miércoles, 24 de agosto de 2022
4233529 - Add MANAGEDBY variable to scheduled report option

Add MANAGEDBY variable for events associated with groups to scheduled report option. This funtionality exists with traditional alerting. The...

Revisado el: miércoles, 24 de agosto de 2022
4300353 - AD Queries take more than 15 minutes to be collected

AD Queries takes unusually long to be collected by the Agent causing the display interval in the Client to be about 20 minutes.

Revisado el: miércoles, 24 de agosto de 2022
4236350 - AD Protection Wizard does not allow MSA or GMSA objects to be added to bypass protection

In 7.1, it is no longer possible to add an MSA or GMSA object to the the Allowed to Access Protected Objects section of the AD Protection Template...

Revisado el: miércoles, 24 de agosto de 2022
4224685 - AD Query Logging Exclusion by Source IP

Can Change Auditor exclude Active Directory Query events based on the Source IP address of the LDAP call? Some customers may be trying to find a...

Revisado el: miércoles, 24 de agosto de 2022
4222727 - AD Query events not showing correct Origin field.

When reporting on AD Query events the Origin field does not display the correct machine name or IP.

Revisado el: miércoles, 24 de agosto de 2022
4292419 - AD Group Nesting and Token Bloat Alerting

What alerting, reporting and prevention options are available in Change Auditor to help us alert and prevent AD Group Nesting, and AD Token Bloat...

Revisado el: miércoles, 24 de agosto de 2022
4225120 - Forest DNS Zone Master and Domain DNS Zone Master role moves recorded as Infrastructure Master role move events

Moving the FSMO owner for the ForestDnsZones or DomainDnsZones partitions is reported in CA as an Infrastructure Master role change.

Revisado el: miércoles, 24 de agosto de 2022
4351333 - Foreign forests and AD Protection templates

With version 7.0.4 we're testing the foreign-forest functionality, is it possible to protect AD objects in foreign-forests without a coordinator...

Revisado el: miércoles, 24 de agosto de 2022
4348936 - Foreign Forest Agent using gMSA credentials is not able to connect to the coordinator

The foreign agent will currently work properly when using a regular service account.  However, when the credential configurator is changed to use a...

Revisado el: miércoles, 24 de agosto de 2022
4344622 - Foreign forest agents showing inactive after upgrade of those previously manually installed

Foreign forest agents are showing as inactive after upgrade from 7.0.4 which were previously manually installed. I've logged into those hosts and...

Revisado el: miércoles, 24 de agosto de 2022
4237730 - Force the ChangeAuditor Coordinator or Agent to use a specific Global Catalog server

How to configure the Change Auditor Coordinator  or Change Auditor Agent to use a specific Global Catalog server

Revisado el: miércoles, 24 de agosto de 2022
4294521 - For Agent disconnect event the WHO is blank

When an Agent service is stopped , either gracefully or forcibly stopped, for the event class Change Auditor Agent disconnected the WHO is blank...

Revisado el: miércoles, 24 de agosto de 2022
4288781 - Following upgrade unable to logon to Change Auditor Client

Following upgrade unable to logon to Change Auditor Client, error "access denied, "domain\useraccount" does not have the required permissions to...

Revisado el: miércoles, 24 de agosto de 2022
4276011 - Following upgrade the ChangeAuditor Coordinator service will not stay running

After upgrading ChangeAuditor to the newest version, the Coordinator starts then stops. The following messages are found in the Coordinator log...

Revisado el: miércoles, 24 de agosto de 2022
4320195 - Folders Deleted search results returns no data.

An administrator notices that there were no Folder Deleted events showing in any of his file system reports although he included that Event Class...

Revisado el: miércoles, 24 de agosto de 2022
4230526 - Folder open events not being audited when accessed from Windows 10 workstation

After setting up folder open auditing for a specific folder - open events are not being audited when accessed from  Windows 10 workstation.

Revisado el: miércoles, 24 de agosto de 2022
4233497 - Delay in O365 audit events becoming available in Change Auditor

Office 365 audit events are not searchable in Change Auditor for hours after the changes take place.

Revisado el: miércoles, 24 de agosto de 2022
4320978 - Defect in stored procedure SystemUserAccess prevents inherited rights in SQL role

Users are unable to access archive databases because the SQL role in the archive database is not allowing rights to be inherited from the group...

Revisado el: miércoles, 24 de agosto de 2022
4233596 - Default report layout for imported searches

Is there a way to preserve the report layout on imported searches?

Revisado el: miércoles, 24 de agosto de 2022
4305716 - Decommissioned server still shows in agent statistics and configuration

We followed the instructions in https://support.quest.com/change-auditor/kb/291570/how-to-decommission-a-coordinator-server-and-remove-quest...

Revisado el: miércoles, 24 de agosto de 2022
4328990 - DC may be listed as a member server inside the agent deployment wizard

In CA (ChangeAuditor)  a DC may be listed as a member server inside the agent deployment wizard

Revisado el: miércoles, 24 de agosto de 2022
4312738 - dbo.usp_AgentConfiguration_Read timing out in a large customer environment by caching in coordinator.

Recently migrated CA storage of protection from AD to SQL model. This involved export from existing instance (AD based) into a new instance (SQL...

Revisado el: miércoles, 24 de agosto de 2022
4344620 - Date formats in CSV search exports and Reports are inconsistent.

Sometimes the date/time values in CSV exports and CSV reports are different.

Revisado el: miércoles, 24 de agosto de 2022
4344414 - Database upgrade fails with error: SQL error(2716): Column, parameter, or variable #3: Cannot specify a column width on data type ntext.;

Database upgrade fails with the following message: SQL error(2716): Column, parameter, or variable #3: Cannot specify a column width on data type...

Revisado el: miércoles, 24 de agosto de 2022
4311911 - Database upgradew stuck at 50% service disable

After coordinator upgrade the service keeps disabling itself.  In the log file,  SQL Database trying to upgrade but failing at 50%. Error There...

Revisado el: miércoles, 24 de agosto de 2022
4286917 - Database migration question

Which SQL platforms are supported in CA 7.0.4?

Revisado el: miércoles, 24 de agosto de 2022
4348908 - Database is higher version than our application

I am unable to connect to the Change Auditor coordinator using the client.

Revisado el: miércoles, 24 de agosto de 2022
4249526 - Database Exception error when opening the Change Auditor Client

The following error was presented when attempting to login to the Change Auditor Client" 'The EXECUTE permission was denied on the object 'usp...

Revisado el: miércoles, 24 de agosto de 2022
4233504 - Database exception. Invalid object name report.template

Within the Change Auditor client , the user receives the error: "Invalid Object Name Report.template", when clicking on Report Layouts under View...

Revisado el: miércoles, 24 de agosto de 2022
4349045 - Database Direct Connection failing

Cannot connect from client via Database Direct connection

Revisado el: miércoles, 24 de agosto de 2022
4300292 - Database Creation failed: "Error Directory lookup for the file"

While attempting to deploy Change Auditor Coordinator to create the database, the following error is displayed in the Coordinator logs...

Revisado el: miércoles, 24 de agosto de 2022
4255599 - Database 'ChangeAuditor' is already open and can only have one user at a time

The Coordinator log states the following after initial installation ChangeAuditor: ERROR: Database 'ChangeAuditor' is already open and can only...

Revisado el: miércoles, 24 de agosto de 2022
4237767 - Database access error after upgrading "incorrect product version, X.X.XXX expecting Y.Y.YYY"

After upgrading CA, an error similar to the following my occur when opening the CA client: "Database access error, incorrect product version, X.X...

Revisado el: miércoles, 24 de agosto de 2022
4250394 - Data Migration Tool displays the error "The source and destination database are the same instance."

After specifying different databases on the Source Database and Destination Database tabs, the following error is displayed: The source and...

Revisado el: miércoles, 24 de agosto de 2022
4236424 - Customize default search columns

Can the default search columns be modified so that new searches use a customized set of  desired columns?

Revisado el: miércoles, 24 de agosto de 2022
4288260 - Minimum .net Framework requirement for Change Auditor 6.9

What are the requirements to deploy the Change Auditor Coordinator for version 7.X?

Revisado el: miércoles, 24 de agosto de 2022
4237572 - Minimal permissions required for NetApp cluster-mode

How to provide the AD user account used for auditing NetApp with Change Auditor minimal permissions on the NetApp filer in cluster-mode?

Revisado el: miércoles, 24 de agosto de 2022
4234434 - Migrating the Change Auditor database to an Azure hosted SQL instance

As of Change Auditor 7.1.1, it is now supported to host the CA database on an Azure hosted managed SQL instance. How do you migrate the CA DB to...

Revisado el: miércoles, 24 de agosto de 2022
4282588 - MicrosoftCloudPlugins log show lots of messages - Warn: Exception resolving actor, using event userid

When viewing the MicrosoftCloudPlugins.log.nptlog there may be lots of warnings as follows: Message: Exception resolving actor, using event...

Revisado el: miércoles, 24 de agosto de 2022
4237442 - Microsoft Office temporary files exclusion in the Change Auditor File System Template

Excluding Microsoft Office temporary files in a Change Auditor File System Template.

Revisado el: miércoles, 24 de agosto de 2022
4233445 - Microsoft Office Event Consolidation

When adding *.tmp to the exclusion field, Microsoft Office event consolidation stops working.

Revisado el: miércoles, 24 de agosto de 2022
4255360 - Microsoft Azure AD Connect service account generates "Irregular Domain Replication Activity Detected" events

Every two minutes on the Domain Controller where Azure AD Connect is installed an "Irregular Domain Replication Activity Detected" event is...

Revisado el: miércoles, 24 de agosto de 2022
4288891 - Message Read by Non Owner not being triggered.

Message Read by Non Owner not being triggered when a message that was previously read by owner is then viewed in OWA by the non owner. If a non...

Revisado el: miércoles, 24 de agosto de 2022
4250695 - Max character limit on XML data in the Parameter column of the AuditEvent table

Max character limit on XML data in the Parameter column of the AuditEvent table. A customer is seeing "Truncated Yes" in the Event details (as...

Revisado el: miércoles, 24 de agosto de 2022
4324483 - Many SQL Data Level Auditing Events have an empty Origin value

You experience many SQL Data Level Auditing Events have an empty Origin value. Also, it does not happen with all events.

Revisado el: miércoles, 24 de agosto de 2022
4256652 - Manual Integration between ARS and Change Auditor

How to perform a manual Integration between ARS and Change Auditor

Revisado el: miércoles, 24 de agosto de 2022
4289336 - Make a search into a widget

I would like to use the web-client interface to create a search and make it a dashboard/shared overview.

Revisado el: miércoles, 24 de agosto de 2022
4231075 - SideBySide errors on ChangeAuditor agent start-up. Error, " Failed to load QNAManager.dll"

Windows servers running Change Auditor Agent may display the following event in the Agent log during start-up: Level: WARN Thread: 1496...

Revisado el: miércoles, 24 de agosto de 2022
4227919 - Should Coordinators located close to SQL server or remote sites based on Agent locations

The purpose of this KB is to have best practice for where to locate Coordinators when multiple are deployed in the environment. 

Revisado el: miércoles, 24 de agosto de 2022
4324781 - SharePoint Auditing Wizard cannot display Unicode names of SharePoint sites

The Sharepoint wizard in Change Auditor has difficulties displaying Unicode characters. You may experience the issue i.e. when using Cyrillic...

Revisado el: miércoles, 24 de agosto de 2022
4267288 - SharePoint agent is not collecting data on a fresh install

Revisado el: miércoles, 24 de agosto de 2022
4253671 - SharePoint 2013 task synchronization with Outlook 2013 fails when Change Auditor Agent is running on the SharePoint server

SharePoint 2013 task synchronization with Outlook 2013 fails when Change Auditor Agent service is started on the SharePoint server. 

Revisado el: miércoles, 24 de agosto de 2022
4237851 - SharePoint auditing template creation fails at scanning topology with XML document must have a top level element error

The following error is displayed when SharePoint auditing template creation fails at scanning topology: "Failed to scan SharePoint topology...

Revisado el: miércoles, 24 de agosto de 2022
4307094 - Shared Web Overview shows as HTML code after upgrade

Shared Web Overview I had prior, is listed but no content displayed with it. Widgets, if I click with any, I get HTML code display vs what would be...

Revisado el: miércoles, 24 de agosto de 2022
4294461 - Shared overview reults appear oldest first and newest last.

When displaying the results in a shared overview the Time Detected sort shows the results oldest to newest rather than oldest to newest.

Revisado el: miércoles, 24 de agosto de 2022
4307018 - Several Custom User Monitoring event classes require CAExchange license for monitoring

We are attempting to pull what looks like a regular Active Directory event under 'Custom User Monitoring - User's requirement for a password has...

Revisado el: miércoles, 24 de agosto de 2022
4346978 - Setting up a VMware auditing template

Why do I have to pick an agent to deploy a VMWare auditing template into my environment?

Revisado el: miércoles, 24 de agosto de 2022
4314698 - Services Hook will not load on Windows Server 2012/2012 R2 unless the server is rebooted

Considering the following scenario: Windows 2012/2012 R2 Change Auditor 5.9+ installed ( 6.5+ if Operating System is 2012 R2 ) During...

Revisado el: miércoles, 24 de agosto de 2022
4288527 - Services not being audited in Change Auditor 6.9.1 or 6.9.2

On a Windows Server 2008 R2 host the services are not being audited even after a Service Auditing template is created and applied to the agents...

Revisado el: miércoles, 24 de agosto de 2022
4346953 - Servers may hang if agent service is shutdown or upgraded due to conflict with Symantec Antivirus

On servers that are running the ChangeAuditor agent along with Symantec Antivirus or Symantec Backupexec agents, the agent may hang when shutdown...

Revisado el: miércoles, 24 de agosto de 2022
4233638 - Servers no longer online still exist in the deployment area

Revisado el: miércoles, 24 de agosto de 2022
4298641 - Server performance running slow

The coodinator is running slow. Change Auditor Client takes a while to open.

Revisado el: miércoles, 24 de agosto de 2022
4224941 - Sending a report to multiple recipients

How to configure a report to send to multiple recipients.

Revisado el: miércoles, 24 de agosto de 2022
4282581 - Seeing the error No public key found matching the coordinator key

When viewing the coordinator logs the following warning may be seen periodically: no public key found matching the coordinator key

Revisado el: miércoles, 24 de agosto de 2022
4297717 - Security patch for Linux Compatibility with Change Auditor for Thread Detection ( TD)

If necessary to run a security & vulnerability patch for Linux Red Hat and compatibility is not determined with Change Auditor for Threat Detection.

Revisado el: miércoles, 24 de agosto de 2022
4319224 - Security logs

In certain environments customers may want to store Windows Event logs in a different location, would that require a re-configuration of the...

Revisado el: miércoles, 24 de agosto de 2022
4227706 - Secure content warning for web client when accessed over SSL

Revisado el: miércoles, 24 de agosto de 2022
4317028 - Searches built using multiple "LIKE" criteria do not return any results

Working searches created in previous versions of Change Auditor, and new searches created in the current version that are configured using multiple...

Revisado el: miércoles, 24 de agosto de 2022
4314599 - Searches not displayed or missing Private folder on Searches tab

Searches not displayed or missing Private folder on Searches tab when connecting to a ChangeAuditor Coordinator with a ChangeAuditor Client in a...

Revisado el: miércoles, 24 de agosto de 2022
4297368 - Searches or alerts against group membership may not return all the expected results

Searches that use group membership as one of the filters may not return all of the expected objects or changes. Similarly, alerts may not run as...

Revisado el: miércoles, 24 de agosto de 2022
4284678 - Searches are only returning 50000 events

When running a search in ChangeAuditor, only 50000 results are returned in the Search results.

Revisado el: miércoles, 24 de agosto de 2022
4322397 - Search tab not loading any searches

Consider the scenario: Search Tab not loading any searches for a user who is member of Change Auditor Administrators. Change Auditor Client log...

Revisado el: miércoles, 24 de agosto de 2022
4282382 - Search-Mailbox cmdlet not audited by Change Auditor

From Exchange Powershell, Change Auditor does not record an event when running the cmdlet Search-Mailbox.

Revisado el: miércoles, 24 de agosto de 2022
4315855 - Search Scope is not working for Organizational Units

When selecting a Search Scope of OneLevel (This object and Child Objects Only) for OUs, it is expected that the Search would be limited to just the...

Revisado el: miércoles, 24 de agosto de 2022
4225251 - Search results not returning all expected results

The search results are not displaying all the events that are expected. 

Revisado el: miércoles, 24 de agosto de 2022
4344538 - Search LDAP authentication type and port used for AD queries

Would like to see the LDAP authentication type -simple bind, Kerberos and the Port used by the AD Query connection in the event details of LDAP...

Revisado el: miércoles, 24 de agosto de 2022
4325335 - Search for a service account logon history shows empty

When searching for Event Objects - but nothing comes out User auth through Kerberos User logged on interactively User logged on interactively...

Revisado el: miércoles, 24 de agosto de 2022
4294391 - Search for a specific user logon

Need to find logon information for a specific user and getting results for all user logons.

Revisado el: miércoles, 24 de agosto de 2022
4300398 - INTERNAL - Cluster Service hangs or fails when we run backup.

Cluster Service hangs or fails when we run backup.

Revisado el: miércoles, 24 de agosto de 2022
4250324 - INTERNAL - Change Auditor Agent service fails to start due to failure to create "Managed Plugin Proxy"

Change Auditor Agent service fails to start and the following is recorded in the Change Auditor Agent log file: 2015-12-09 04:10:39.518 [4264...

Revisado el: miércoles, 24 de agosto de 2022
4249318 - INTERNAL - As a CA Administrator, I would like to be able to create more granular searches against Exchange Cmdlet Executed events

As a CA Administrator, I would like to be able to search and alert against more specific criteria when it comes to Exchange Cmdlet Executed events.

Revisado el: miércoles, 24 de agosto de 2022
4305592 - Intermittent SQL connection failures for different SQL tasks

 intermittent SQL connection failures for different SQL tasks like 2021-06-29 07:05:21.890 [33][INFO][Quest.Data.ExceptionSql.OnExceptionSqlEvent...

Revisado el: miércoles, 24 de agosto de 2022
4233770 - Intermittent FPolicy disconnect issue when auditing NetApp File Contents Written

Intermittent FPolicy disconnect issue when auditing "NetApp File Contents Written" event. During the disconnect the following error can be found...

Revisado el: miércoles, 24 de agosto de 2022
4224655 - Intermittent FPolicy warning when Change Auditor agent queries file/folder security ACL

After configuring Change Auditor auditing for NetApp, intermittent warnings are recorded on the NetApp filer when Change Auditor Agent resolves...

Revisado el: miércoles, 24 de agosto de 2022
4306982 - Integrating On Demand with Change Auditor Version 7.0.3

During integration of  On-Demand - Audit SaaS Module with a Change Auditor configuration in SkyTap When pressing  SignIn then Configure...

Revisado el: miércoles, 24 de agosto de 2022
4297420 - Installing agent in Azure Domain Controller

Deployment of an agent on Azure environment

Revisado el: miércoles, 24 de agosto de 2022
4300370 - Installation name on our SCP(xxxxxx) is different from the configured installation name (DEFAULT).

Trying to open the Client and there is an error message. 'There was an error connecting to the coordinator service. Check the client log for...

Revisado el: miércoles, 24 de agosto de 2022
4249555 - Installation of a Coordinator in a DMZ domain behind firewall.

We are planning to install a new Coordinator server in a DMZ Domain behind a Firewall We would like this Coordinator to send events...

Revisado el: miércoles, 24 de agosto de 2022
4351355 - SRS compliance reports do not work

SRS compliance reports do not work

Revisado el: miércoles, 24 de agosto de 2022
4288709 - SRS Reporting Issue

When publishing a search to SRS with the role of operator, the Client throws and exception and has to be closed.

Revisado el: miércoles, 24 de agosto de 2022
4233459 - SRS Reports do not contain the same data as Change Auditor Reports

When running a report via SRS, the data does not match the same report in Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4230995 - SRS error, "401 unauthorized" trying to add reporting services

In this scenario the following is true: You can browse the /reports and /reportserver pages if logged on locally to the server running SQL...

Revisado el: miércoles, 24 de agosto de 2022
4227852 - SQL template filter changes not applied when using the wizard via Configurations

1) Open the Administration area and select "Configuration" area for the Agents 2) Click "Configurations" button. 3) Under "Auditing and...

Revisado el: miércoles, 24 de agosto de 2022
4224724 - SQL Server® Data Level auditing and SQL Server® auditing for SQL Server 2016

When will SQL Server® Data Level auditing and SQL Server® auditing for SQL Server 2016 be supported?

Revisado el: miércoles, 24 de agosto de 2022
4324546 - SQL Server ERRORLOG is growing and information events are added often

When working with Change Auditor and enabling SQL Server Data Level Auditing (DLA) you may notice that the SQL Server ERRORLOG file is growing...

Revisado el: miércoles, 24 de agosto de 2022
4288790 - SQL Server events not collected

After creating new Templates for SQL Server and applying those to the servers'  Agents , no event is being received When looking through the...

Revisado el: miércoles, 24 de agosto de 2022
4346966 - SQL query for SIEM connectivity

Is there is a SQL query that can be run against the CA database to determine if it has a SIEM configuration enabled? We have a large environment...

Revisado el: miércoles, 24 de agosto de 2022
4264613 - SQL port need for a Coordinator located on another domain

Revisado el: miércoles, 24 de agosto de 2022
4286928 - SQL Internal Command

Does Change Auditor execute internal SQL commands?

Revisado el: miércoles, 24 de agosto de 2022
4306593 - SQL error: TIMEOUT on INSERT INTO dbo.AuditEvent_AlertQueue_AlertQueue

In the Coordinator logs, the following error message is displayed: Long running query detected. SQL error: TIMEOUT on INSERT INTO dbo...

Revisado el: miércoles, 24 de agosto de 2022
4259036 - SQL events missing the Origin, Application name or Who (Login user)

When using Change Auditor to capture events on Microsoft SQL Server 2005 or 2008 you may find that the following is not captured: Origin...

Revisado el: miércoles, 24 de agosto de 2022
4236180 - SQL error: “Autogrow of file ‘ChangeAuditor’ in database ‘ChangeAuditor’ was cancelled by user or timed out after 30121 milliseconds.”

SQL error in relation to the Change Auditor database and the Coordinator is no longer processing events: “Autogrow of file ‘ChangeAuditor’ in...

Revisado el: miércoles, 24 de agosto de 2022
4237428 - SQL Error (2146232060) The Execute permission was denied on the Object 'udt_GUID_List_Type' database "ChangeAuditor", schema 'dbo',command: dbo.sup_AlertQuery_ReadActiveQueries

The Coordiantor logs shows the following error messages: Error uploading stats Error running bulk update AuditEvent_STS_SiteID: SQL Error...

Revisado el: miércoles, 24 de agosto de 2022
4307088 - SQL DLA and cluster auditing

Trying to do Always on SQL Cluster and am trying to use the group listener name to connect to the database and I get the following error: Agent...

Revisado el: miércoles, 24 de agosto de 2022
4230851 - SQL DLA auditing fails with error, Could not load the DLL xp_QuestLogReader.dll

SQL DLA fails with error in the SQLDLA Agent log: "Could not load the DLL xp_QuestLogReader.dll, or one of the DLLs it references. Reason: 126...

Revisado el: miércoles, 24 de agosto de 2022
4235421 - SQL Data Level Auditing is not capturing any changes

An administrator added the "t1906" startup switch to each instance of SQL and created a SQL Data Level audit template, but the agent was not...

Revisado el: miércoles, 24 de agosto de 2022
4231294 - SQL Data Level events not being captured

SQL Data Level events are not being captured. Reviewing the SQLDLA.NPTLOG shows multiple errors: Exception caught while trying to get latest...

Revisado el: miércoles, 24 de agosto de 2022
4300647 - SQL compression supported

DBA would like to enable SQL data compression on several tables in ChangeAuditor archive databases.  Example syntax: ALTER TABLE Event REBUILD...

Revisado el: miércoles, 24 de agosto de 2022
4244151 - SQL Data Level Auditing does not record events for a database

After successfully configuring SQL Data Level Auditing (DLA) in Change Auditor, events are not recorded for a database. A review of the SqlDla...

Revisado el: miércoles, 24 de agosto de 2022
4230921 - SQL Audit Login Failed events do not include user SID and must be searched/purged using LIKE filter if using the WHO tab as matching criteria

SQL Audit Login Failed events must be searched/purged using LIKE filter if using the WHO tab.

Revisado el: miércoles, 24 de agosto de 2022
4237012 - Active Roles Server integration script fails to deploy even though the deployment account is Change Auditor Administrator and Active Roles Server administrator

Active Roles Server integration script  fails to deploy even though the deployment account is Change Auditor Administrator and Active Roles Server...

Revisado el: miércoles, 24 de agosto de 2022
4236699 - Active Roles Server 7.1 will not send initiator information to Change Auditor when installed on 2016 server

Active Roles Server (ARS) 7.1 will not send initiator information to Change Auditor when installed on 2016 server.

Revisado el: miércoles, 24 de agosto de 2022
4221415 - Active Roles generates 2 events having 1 event missing Initiator information in Change Auditor

When Active Roles is configured to automatically add a new user to a group, via an Auto-Provision Policy, Change Auditor shows 2 event entries for...

Revisado el: miércoles, 24 de agosto de 2022
4254633 - Active Directory Groups not excluded when using the "Exclude The Following Selections(s)" option

Events are not excluded for members of an Active Diectory Group when the Group object is added to the "Who" tab and "Exclude The Following...

Revisado el: miércoles, 24 de agosto de 2022
4316389 - Active Directory Group object Managed By Name is blank but no ChangeAuditor event was created

The Name field on the Managed By tab of the Active Directory Group object was populated but changed to a blank but there was no "group managedBy...

Revisado el: miércoles, 24 de agosto de 2022
4269583 - Active Directory events not audited from all forests in multi-forest deployment

Active Directory events are not always captured from multi-forest environment where there is a common (shared) SQL database for the Coordinators...

Revisado el: miércoles, 24 de agosto de 2022
4217547 - Active Directory Events Not Being Generated Even Though Agent is Running Successfully

Some or all AD events not being generated/collected on one or all DCs, even though the agent is running with minimal errors.

Revisado el: miércoles, 24 de agosto de 2022
4311143 - Active Directory changes are not monitored when a Member Server is promoted to a Domain Controller

A member server has a Change Auditor Agent installed which is then promoted to a Domain Controller. The Change Auditor Coordinator topology still...

Revisado el: miércoles, 24 de agosto de 2022
4254031 - Active Directory and GPO protection may be inconsistent between multiple Change Auditor agents

When Change Auditor Active Directory and GPO Protection is enabled and is configured to be stored in Active Directory, the Active Directory and GPO...

Revisado el: miércoles, 24 de agosto de 2022
4217705 - Active Directory (AD) events missing

A change is made to Active Directory and the event is not captured by Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4255284 - Account Lockout events not working after upgrade

If security event log scavenging is enabled to receive account lockout events and the event log is cleared or a 3rd party software copies the live...

Revisado el: miércoles, 24 de agosto de 2022
4233525 - Access denied for operation View_FluidFS_Templates

After logging to the Change Auditor Client with Administrator permission, when click on View | Administration, the following popup is displayed...

Revisado el: miércoles, 24 de agosto de 2022
4294248 - Access Denied error when creating or editing an Active Directory Protection Templates

When attempting to create a new Active Directory Protection Template or edit an existing Active Directory Protection Template, a "Access Denied...

Revisado el: miércoles, 24 de agosto de 2022
4244340 - Access denied displayed when attempting to login to the Change Auditor Client

The following error is displayed when attempting to login to the Change Auditor Client and the user is prompted to re-enter their credentials...

Revisado el: miércoles, 24 de agosto de 2022
4233723 - Ability to export list of alert and report-enabled searches to csv from the client

Ability to export list of alert and report-enabled searches to csv from the client

Revisado el: miércoles, 24 de agosto de 2022
4288957 - Ability to delete Private Reports and Alerts

Need to be able to delete those Private Reports and Alerts not just disable them.

Revisado el: miércoles, 24 de agosto de 2022
4294812 - Ability to add a second agent to a VMWare template for Fault tolerance

Requirement for fault tolerance (multiple agents) for VMware auditing template.

Revisado el: miércoles, 24 de agosto de 2022
4230848 - A user session took place showing as duplicate events / times

When a logon report is run for a user it will have duplicate entries in the logon duration column.

Revisado el: miércoles, 24 de agosto de 2022
4253643 - A Search with a Group and a User added to the WHO tab using the Add button only returns Search results for the User object

When creating a ChangeAuditor Search and defining both an Active Directory User object and Active Directory Group object on the "Who" tab using the...

Revisado el: miércoles, 24 de agosto de 2022
4224721 - A report runs an hour earlier or an hour later than scheduled.

A report runs an hour earlier or an hour later than scheduled, and this occurs following Daylight Savings Time starting or ending .

Revisado el: miércoles, 24 de agosto de 2022
4218685 - A performance impact is seen with ArcGIS mapping software when Change Auditor Agent is running.

ArcGIS mapping software can experience a performance impact when the Change Auditor Agent is installed on the same machine.  Map files which...

Revisado el: miércoles, 24 de agosto de 2022
4312893 - A new Change Auditor License is applied to the Change Auditor Coordinator but some ChangeAuditor Agents do not show the license as applied

In a Change Auditor installation with multiple Change Auditor Coordinators, a new Change Auditor license is applied to a Change Auditor Coordinator...

Revisado el: miércoles, 24 de agosto de 2022
4306528 - A Domain Controller with a SQL Server installed causes the Change Auditor agent to use 100% CPU.

On a Domain Controller with SQL Server and the Change Auditor agent installed, the CPU maxes out at 100% when the agent is enabled and drops to 5...

Revisado el: miércoles, 24 de agosto de 2022
4314371 - A connection was successfully established with the server, but then an error occurred during the pre-login handshake

The following error may occur during initial installation of the Change Auditor Coordinator at the SQL server and instance screen, or may also be...

Revisado el: miércoles, 24 de agosto de 2022
4236243 - 7.1 Coordinator start up failed with database initialization not successful error when using SQL 2012 or 2014

Coordinator service startup fails with a database initialization not successful error when the database is hosted on SQL 2012 or SQL 2014.

Revisado el: miércoles, 24 de agosto de 2022
4227972 - 6644 errors are generated every hour on SharePoint Application server after CA solution is installed

The following 6644 error is generated every hour on SharePoint Application server after CA solution is installed: Event Type: Error Event Source...

Revisado el: miércoles, 24 de agosto de 2022
4288478 - 6.x agent install fails with Error 1935. ..HRESULT: 0x800736FD and rolls back

Cannot deploy agents to 2 domain controllers. Running the agent .msi  manually on the DC results in the install almost completing then it stops...

Revisado el: miércoles, 24 de agosto de 2022
4253960 - 500 Internal Server Error with NullReferenceException when sharing calendar in Outlook Web Access

When a Change Auditor agent is installed on the Exchange server(s), Outlook Web Access (OWA) users may receive a 500 Internal Server Error with...

Revisado el: miércoles, 24 de agosto de 2022
4297767 - 500 Internal Error after installing Change Auditor Web Client

After installing the web client and attempting to run it in a 2012 R2 server. It shows the  Err "500 Internal Error after installing Change...

Revisado el: miércoles, 24 de agosto de 2022
4273959 - "You're not authorized to view this page" displayed in the Change Auditor Web Client

Users who are only members of the ChangeAuditor web shared overview users-[....] group, are presented with the following warning when they start...

Revisado el: miércoles, 24 de agosto de 2022
4314715 - "User Account unlocked" event records that a user unlocked their own account

"User Account unlocked" event records that the user account that was unlocked is the same account that unlocked the account. The user could be an...

Revisado el: miércoles, 24 de agosto de 2022
4260866 - "Unexpected DSDN data" error appear in the agent log

The following error may appear in the agent log: ID: 1229 Time: 20/5/15 14:48:41.185 Level: ERROR Thread: 12716 Logger: CAAD.Agent...

Revisado el: miércoles, 24 de agosto de 2022
4220966 - "Too many running ITAD drivers found. Reboot is required" when trying to upgrade the Change Auditor Agent

The error returned (either when installing via the console or locally) is "Too many running ITAD drivers found. Reboot is required."

Revisado el: miércoles, 24 de agosto de 2022
4249463 - "Too many events in Scheduler task queue"

ChangeAuditor is not getting any new events. Coordinator log shows: "Too many events in Scheduler task queue: 1003 (maximum: 1000), cannot accept...

Revisado el: miércoles, 24 de agosto de 2022
4249463 - "Too many events in Scheduler task queue"

ChangeAuditor is not getting any new events. Coordinator log shows: "Too many events in Scheduler task queue: 1003 (maximum: 1000), cannot accept...

Revisado el: miércoles, 24 de agosto de 2022
4254930 - "The user name or password is incorrect" displayed when creating a SharePoint Template

When creating a SharePoint auditing template in ChangeAuditor Client, the SharePoint Topology scan fails with the error: Failed to scan...

Revisado el: miércoles, 24 de agosto de 2022
4319820 - "The profile for the user is a temporary profile" error when trying to install Change Auditor MSI packages.

An administrator observed the following error when installing the Change Auditor Agent, Client or Coordinator, and the instalation fails:  "The...

Revisado el: miércoles, 24 de agosto de 2022
4288539 - "The page cannot be displayed because an internal server error has occurred" displayed when attempting to logon to the ChangeAuditor Web Client

Receive the error "The page cannot be displayed because an internal server error has occurred."  instead of the typical error "Domain name is...

Revisado el: miércoles, 24 de agosto de 2022
4319002 - "The given key was not present in the dictionary" error displayed when executing Powershell command

An administrator gets the following error when running the PowerShell GetAgents cmdlet or "New-CertificateBinding.ps1" script located in C...

Revisado el: miércoles, 24 de agosto de 2022
4312953 - "The following applications should be closed before continuing the install" is displayed when installing the ChangeAuditor agent manually

When installing the ChangeAuditor agent manually, the pop-up message is displayed: "The following applications should be closed before...

Revisado el: miércoles, 24 de agosto de 2022
4255116 - "No SharePoint installation is found in your environment" when adding a Change Auditor for SharePoint template

When adding a Change Auditor for SharePoint template, the following warning is displayed: No SharePoint installation is found in your environment...

Revisado el: miércoles, 24 de agosto de 2022
4250489 - "Missing valid licenses for the following features" displayed when installing ChangeAuditor 6.0

During the ChangeAuditor 6.0 installation, the installer prompts "To install selected product feature, you require a valid license file. If it is...

Revisado el: miércoles, 24 de agosto de 2022
4228106 - "Mailbox was enabled" event may contain empty WHO field

In some scenarios the "Mailbox  was enabled" event  may be missing the WHO field (it's empty).

Revisado el: miércoles, 24 de agosto de 2022
4244051 - "Invalid credentials" displayed when executing a runtime Search from the ChangeAuditor Web Client

"Invalid credentials or GC://<global_catalog_server> is unavailable" displayed when executing a runtime Search from the ChangeAuditor Web Client.

Revisado el: miércoles, 24 de agosto de 2022
4268563 - "Invalid column name 'UserCanonical'" error received during install/upgrade

"Invalid column name 'UserCanonical'" error received during install/upgrade ID: 184 Time: 2/2/09 15:11:56.496 Level: ERROR Thread: 3124...

Revisado el: miércoles, 24 de agosto de 2022
4318595 - "Input String was not in the correct format" error when trying to save Coordinator SQL Configuration

An administrator was getting getting the following error when trying to set Coordinator SQL Configuration: "Input siring was not in the correct...

Revisado el: miércoles, 24 de agosto de 2022
4254873 - "Incorrect product version" displayed when connecting to an archive database

The following is displayed when attempting to connect to an archive database with the Change Auditor client: "Incorrect product version. Would...

Revisado el: miércoles, 24 de agosto de 2022
4249303 - "Fatal error verifying the supplied credentials” during install

Trying to install Change Auditor may result in the following error: "Fatal error verifying supplied credentials. Please verify that SQL server is...

Revisado el: miércoles, 24 de agosto de 2022
4220276 - "Error 300, Procedure : usp_SQL Lock_Read, Message: VIEW SERVER STATE permission was denied on object 'server', database 'master'"

When trying to run a Purge or Archive job, the following error may be shown: "Error 300, Procedure : usp_SQL Lock_Read, Message: VIEW SERVER...

Revisado el: miércoles, 24 de agosto de 2022
4354923 - "Error 1385: Logon failure" displayed when setting up SQL Reporting Services from the ChangeAuditor Client

The following error is displayed when setting up SQL Reporting Services from the ChangeAuditor Client: "Error 1385: Logon failure: The user has...

Revisado el: miércoles, 24 de agosto de 2022
4244038 - "Domain Policy Changes last 30 days" Search\Alert displays a Modify Attribute event where a Group Policy versionNumber was changed

When running the "Domain Policy Changes last 30 days" Search, there are events that show the Modify Attribute event where a Group Policy...

Revisado el: miércoles, 24 de agosto de 2022
4316327 - "DNS Root Hints" changes are not displayed in Change Auditor

When changes to the "DNS Root Hints" are made, no events are being recorded and displayed in Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4218680 - "CA4xCompatibility subsystem exited unexpectedly. Shutting down coordinator." error appears in log

The ChangeAuditor.Service.exe.nptlog file shows the following error: ID: 28972 Level: ERROR Thread: 11 Logger: ChangeAuditor.Coordinator...

Revisado el: miércoles, 24 de agosto de 2022
4234310 - "Array dimensions exceeded supported range" error recorded and alerts not sent when "Events per Email" specified as a high value

On the Search Alert tab, there is is an "Events Per email" field that limits the number of event that can be sent in a single alert email. A...

Revisado el: miércoles, 24 de agosto de 2022
4234728 - "A network error occurred while attempting to read from the file" error displayed when uninstalling the Change Auditor Agent

Receiving "A network error occurred while attempting to read from the file: C:\Windows\Installer\Quest ChangeAuditor Agent (x64).msi" when trying...

Revisado el: miércoles, 24 de agosto de 2022
4250371 - " Change Auditor event message file locked" displayed when deploying a Change Auditor agent

The Deployment Result column displays, "The Windows EventLog service has a Change Auditor event message file locked, which could cause undesired...

Revisado el: miércoles, 24 de agosto de 2022
4224304 - Search created using AD Query subsystem with Scope of This Object and All Child Objects do not return any child object results

After creating a search using the subsystem type of AD Query and selecting a Scope to use This Object and All Child Objects, it is noticed that...

Revisado el: miércoles, 24 de agosto de 2022
4235642 - Scripting Support (PowerShell) for Change Auditor

Administrators may require a scripting interface to Change Auditor for all management actions (e.g. creation of Protection Templates, searches, etc.) 

Revisado el: miércoles, 24 de agosto de 2022
4219730 - Scripting Agent initialization failed

After deploying a Change Auditor agent to an Exchange Server, any Exchange Server that does not have Change Auditor installed is not  able to use...

Revisado el: miércoles, 24 de agosto de 2022
4227715 - SCOM 2007 Management Pack for ChangeAuditor for Active Directory

Unable to locate where to download the SCOM Management Pack for ChangeAuditor for Active Directory.

Revisado el: miércoles, 24 de agosto de 2022
4235416 - Scheduled reports sometimes do not successfully run and complete if the layout is modified

Scheduled reports sometimes do not successfully run and complete if the layout is modified. This can occur if changes are made to the design of...

Revisado el: miércoles, 24 de agosto de 2022
4235058 - Scheduled reports that contains a large amount of data are not being sent.

Some reports that contain a large amount of data and have a large file size are not received.

Revisado el: miércoles, 24 de agosto de 2022
4230652 - Scheduled Reports not running consistently..

Scheduled Reports not running consistently.. Scheduled report some times run fine and then they stop working and strat working again after no know...

Revisado el: miércoles, 24 de agosto de 2022
4227859 - Scheduled reports rendered in CSV format may be malformed if using non-default columns

Reports with certain non-default columns appear as expected printed to CSV or Excel from the Client but in scheduled CSV reports the output is...

Revisado el: miércoles, 24 de agosto de 2022
4224213 - Scheduled reports not working

Scheduled reports are not generating, and Last Run times are showing in the future. (Example: 11/01/2029)

Revisado el: miércoles, 24 de agosto de 2022
4308210 - Scheduled Reports contain different column names than Search

When using Scheduled Reports and having them sent as a csv file, for example, the data headers do not match what is displayed in the client.

Revisado el: miércoles, 24 de agosto de 2022
4244146 - Scheduled report email contain unreadable attachments and file names

Scheduled email reports send by Change Auditor are delivered with unreadable attachments and file names. For example: =utf...

Revisado el: miércoles, 24 de agosto de 2022
4250358 - Scheduled Automatic Reports do not run in Change Auditor

Scheduled Automatic Reports do not run in Change Auditor even though the "Next Run" time and date are populated correctly. In addition, the...

Revisado el: miércoles, 24 de agosto de 2022
4349041 - Runtime prompt search boxes are grayed out for searches on database direct connections

When trying to create a search the same as on a production database, the archive database runtime prompt options are grayed out on the search tabs.

Revisado el: miércoles, 24 de agosto de 2022
4318164 - Runtime Search run in Change Auditor Web Client ignores additional criteria

Run time Searches, which contain multiple criteria on the What tab, ignore the additional criteria when run in the ChangeAuditor Web Client but...

Revisado el: miércoles, 24 de agosto de 2022
4230502 - Running KTPASS command causes Change Auditor to register that the users password was reset

Running KTPASS command causes Change Auditor to register that the users password was reset

Revisado el: miércoles, 24 de agosto de 2022
4220256 - Running a Search never completes

You try to run a search but is just sits there with a spinning circle. Reviewing the Coordinator log you see an error similar to the following...

Revisado el: miércoles, 24 de agosto de 2022
4307044 - Retro-compatibility for Change Auditor Agent with Coordinator 7.x

What are the Agent version compatible with Change Auditor Coordinator in version 7 .x Is there limitation regarding Event Collection or...

Revisado el: miércoles, 24 de agosto de 2022
4288210 - Restriction to an event class in a search does not filter the search results

When using the search such as "User name(s) changed in last 30 days", and adding a restriction to the event class such as  'User samAccountName...

Revisado el: miércoles, 24 de agosto de 2022
4244197 - Restriction value for some events is case sensitive which may cause valid events to not be returned in a Search

Restriction value for some events is case sensitive which may cause valid events to not be returned in a Search. For example, if the "Where the...

Revisado el: miércoles, 24 de agosto de 2022
4238097 - Restricting sender of SMTP Alerts or Reports in multi Coordinator environments

In a multi forest or just a multi Change Auditor Coordinator installation, by default any coordinator can send out SMTP alerts or reports.

Revisado el: miércoles, 24 de agosto de 2022
4325348 - Restrict user access to in Change Auditor Web

Grant access to user which they can only run the account lockout events. The rest of events should be grey-out.

Revisado el: miércoles, 24 de agosto de 2022
4220791 - Restrict access to specific sets of data in Change Auditor?

Currently, Change Auditor allows role-base access defined by the settings in the Application User Interface under the Configuration task list in...

Revisado el: miércoles, 24 de agosto de 2022
4346710 - Restoring missing searches via SQL backup restore

All of the user-created searches are missing from Change Auditor, it seems that only the default built-in searches are present.

Revisado el: miércoles, 24 de agosto de 2022
4255518 - Restore Value option on events will not work when Users are added or removed from an Active Directory Group using Powershell

Restore Value option on events will not work when Users are added or removed from an Active Directory Group using Powershell script such as...

Revisado el: miércoles, 24 de agosto de 2022
4288416 - Requirements for Change Auditor 6.x Coordinator

What are the hardware (System) requirements for the Change Auditor 6.x Coordinator?

Revisado el: miércoles, 24 de agosto de 2022
4252504 - Requested registry access is not allowed error when trying to access archive database directly

During a connection to an Archive DB the error "Requested registry access is not allowed" is displayed. 

Revisado el: miércoles, 24 de agosto de 2022
4278109 - Reports may be sent twice or more during daylight savings

A very specific issue for environments running Change Auditor 6.6 with a coordinator in each of the following regions APAC EMEA AMER Each...

Revisado el: miércoles, 24 de agosto de 2022
4237432 - Reports not showing data for last x days

An administrator observed his agents connected and sending current data to the Coordinator, but running a search for activity in the last 30 days...

Revisado el: miércoles, 24 de agosto de 2022
4299705 - Reports dont show Pie or Bar Chart in the Web Client

When using the Change Auditor WebClient , there is no option to add a Chart from a Search like in the standard Client

Revisado el: miércoles, 24 de agosto de 2022
4294623 - Report tab missing for Operators

We can only see the new Report tab feature when logged into ChangeAuditor (CAAD) with a CAAD Admin. When we log into CAAD with a CAAD Operator the...

Revisado el: miércoles, 24 de agosto de 2022
4300680 - Report of all Connections of AD for 636 - Product Specific Queries (Encrypted Certificate Connection

Need to perform a search for all Active Directory connections on port 636

Revisado el: miércoles, 24 de agosto de 2022
4237668 - Report is sent even though it is not enabled

A Search is still creating or sending a report even though the "Report Enabled" check box is not not checked.

Revisado el: miércoles, 24 de agosto de 2022
4236545 - Report Enabled setting becomes disabled unexpectedly when modifying the recipients list in the To field

If you modify the recipient list of the To field, the check is removed from the Report Enabled checkbox disabling the report.

Revisado el: miércoles, 24 de agosto de 2022
4300617 - Removing server from ChangeAuditor Console

After forcefully demoting a domain controller, how do we remove the machine from the Change Auditor console, or froce the refresh. Or is the...

Revisado el: miércoles, 24 de agosto de 2022
4266236 - Removed Domain Still Exists in ChangeAuditor

Revisado el: miércoles, 24 de agosto de 2022
4223324 - Related Search for the same WHAT produces zero results

When using the Related Search funtion in Change Auditor 6.5, and selecting the item for the same WHAT (usually a user account), zero results are...

Revisado el: miércoles, 24 de agosto de 2022
4233468 - Recently upgraded to Change Auditor 6.5 and the migration events stopped processing

Migration events fail to complete processing after upgrading to Change Auditor 6.5

Revisado el: miércoles, 24 de agosto de 2022
4284618 - Receiving SCP error "Host not found. No IP addresses returned." in Agent log.

The following error is found in the Agent log when troubleshooting Agent connections to the Coordinator/Repository:   "Unable to locate CN=Quest...

Revisado el: miércoles, 24 de agosto de 2022
4299786 - Receiving error while creating Active Directory Protection Template.

While creating Active Directory Protection Template , receiving error as below: Directory Server MYDC.COM does not exist or cannot be contacted

Revisado el: miércoles, 24 de agosto de 2022
4249306 - Receive error "The service did not respond to the start or control request in a timely fashion (1053)" when trying to install agent remotely

When trying to install the agent from the Deployment page in the Client, the following error "The service did not respond to the start or control...

Revisado el: miércoles, 24 de agosto de 2022
4307349 - Rebooting Windows 2019 may result in a System Shutdown and BSOD

On Windows 2019 DCs that have a CA Agent running, initiating a reboot may cause a BSOD and the server to shutdown.

Revisado el: miércoles, 24 de agosto de 2022
4306597 - RDP Black Screen

After monthly patching and reboot of servers.  RDP is blank or black.

Revisado el: miércoles, 24 de agosto de 2022
4319299 - RBAC Implementation for Quest Change Auditor

Can custom AD-groups be used for granting access to Change Auditor components and roles? 

Revisado el: miércoles, 24 de agosto de 2022
4292303 - Quest Change Auditor Client is Extremely slow

The client is extremely slow after migrating a database to SQL 2016 server and moved out 7.0.2 coordinators to a 2019 server. Behavior: To...

Revisado el: miércoles, 24 de agosto de 2022
4250566 - Quest ChangeAuditor Coordinator service starts and stops after new ChangeAuditor installation

The Quest ChangeAuditor Coordinator service starts and stops after new ChangeAuditor installation and a n error similar to the following is...

Revisado el: miércoles, 24 de agosto de 2022
4305775 - Purge the SQL DB using SQL or PowerShell scripts

Purge the SQL DB using SQL or PowerShell scripts

Revisado el: miércoles, 24 de agosto de 2022
4243067 - Purge or Archive job failing with the SQL error: "Primary file group is full"

The purge or archive job may fail constantly with the following error displayed in the Windows Event Viewer Application log on the SQL server...

Revisado el: miércoles, 24 de agosto de 2022
4316934 - Purge of database not possible after activating real time alarming on searches

After enabling a comprehensive forest-wide OU-change alert, purge jobs cannot finish in time and alerts are not triggered. 

Revisado el: miércoles, 24 de agosto de 2022
4300197 - Purge data option does not run when scheduled

Purge data maintenance job does not run when scheduled if the Purge monthly option is selected. The schedule shows the next or first run time to be...

Revisado el: miércoles, 24 de agosto de 2022
4293133 - Purge and archive job not visible in client or web portal

On opening the Change Auditor client as an Administrator some items under the Administration tab, such as Purge and Archive are missing:

Revisado el: miércoles, 24 de agosto de 2022
4288920 - Purge and Archive job are running late when OS Timezone is UTC+2 or higher

When setting up a Purge or Archive job in Change Auditor , the task actually run the day after the one that is configured for This is true...

Revisado el: miércoles, 24 de agosto de 2022
4269643 - Purge and Archive feature causes "Parameter is Not Valid" error in the Change Auditor Client

In Change Auditor client, when the "P urge and Archive" menu is selected on the " Administration tasks" tab, Change Auditor Client crashes and...

Revisado el: miércoles, 24 de agosto de 2022
4243191 - Purge jobs are not reporting actual number of events purged, in most cases the grand total is zero.

An administrator observed that multiple purge jobs are successfully removing events from the database but the number of events purged is not...

Revisado el: miércoles, 24 de agosto de 2022
4289886 - Published reports to SQL Reporting Server fails with Error "The report server cannot decrypt the symmetric key used to access sensitive or encrypted data in a report server database"

When publishing a report to SQL Reporting Services in Change Auditor the Internet Explorer page shows the following error: "The report server...

Revisado el: miércoles, 24 de agosto de 2022
4230874 - Publish to Quest Knowledge Portal option produces no available SRS instances

When selecting the option, "Publish to Quest Knowledge Portal" no Agent is returned in the compiled list of available servers.

Revisado el: miércoles, 24 de agosto de 2022
4225326 - Public Folder changes made through Outlook are not audited.

Public Folder changes such as creating, deleting or renaming that are made using Outlook are not audited by Change Auditor.

Revisado el: miércoles, 24 de agosto de 2022
4346962 - Protected user accounts are not able to log into the CA Client

Adding a user account into the protected users group causes the protected user to not be able to log into the CA client. The following error...

Revisado el: miércoles, 24 de agosto de 2022
4288501 - Protection of Domain Root

Is it possible to use Change Auditor Protection module to safeguard the Domain Root , Configuration Root Level Containers  or Schema Root...

Revisado el: miércoles, 24 de agosto de 2022
4233544 - Protection of user objects and back-link attribute memberOf

Consider the following scenario... 1. Protect an AD user (all attributes). 2. Via ADUC select the users's properties | member of tab. 3. Add...

Revisado el: miércoles, 24 de agosto de 2022
4294511 - Product Life Cycle for Change Auditor

What is the End of Support date for the different Change Auditor versions?

Revisado el: miércoles, 24 de agosto de 2022
4230986 - Process name not displaying under Event Details for Windows File Servers

When a user is making remote changes to a Windows File Server the event details do not show the process information.

Revisado el: miércoles, 24 de agosto de 2022
4344608 - Problem implementing smart card authentication

After trying to enable smart card authentication, I am unable to login so that I can change back to forms based authentication.

Revisado el: miércoles, 24 de agosto de 2022
4320861 - Problem creating a new mailbox with specific name after the Change Auditor agent enabled the Exchange Scripting Agent

The following error was displayed when creating a new mail box after enabling the Exchange Scripting Agent:  The following error occurred during...

Revisado el: miércoles, 24 de agosto de 2022
4249746 - Private folder on the Searches tab does not appear for specific members of a group

Private folder on the Searches tab does not appear for specific members of a group but the Private folder does appear for other ChangeAuditor users.

Revisado el: miércoles, 24 de agosto de 2022
4248855 - Print to PDF taking a long time

After finishing a search, if there is a large number of results Printing to PDF can take a long time to complete, leaving the client...

Revisado el: miércoles, 24 de agosto de 2022
4225297 - PowerShell cmdlet Get-CASearches fails and throws an exception when it is unable to resolve a Search Owner in Active Directory

When running the "Get-CASearches" cmdlet, it performs the ResolveAndSetOwnerProperties function in order to display the Display Name, SID...

Revisado el: miércoles, 24 de agosto de 2022
4230884 - Post upgrade from Change Auditor 5.x to 6.x does not display From and To fields for historical events.

Post upgrading from Change Auditor 5.x to 6.x the historical events in the "From" and "To" fields are blank.  Post upgrade events display the...

Revisado el: miércoles, 24 de agosto de 2022
4251574 - Error while creating Azure AD template in Change Auditor

We are trying to connect our Change Auditor with Azure AD and are getting failures stating incorrect App Key or Secret Key. We have attempted this...

Revisado el: miércoles, 24 de agosto de 2022
4236061 - Error when trying to create an Azure AD or O365 template: “The remote server returned an error: (504) Gateway Timeout”

Trying to create an Azure AD or O365 template in Change Auditor 7.0.4.14039 may result in the error: "The remote server returned an error: (504...

Revisado el: miércoles, 24 de agosto de 2022
4243122 - Error when trying to access the Web Client: "The requested page cannot be loaded"

After installing the Web Client, trying to access http://servername/changeauditor from either the Web Client server or a remote machine results in...

Revisado el: miércoles, 24 de agosto de 2022
4346974 - Error when saving searches in Web Client

You receive an rrror when saving search using Web Client: Server Error in '/ChangeAuditor' Application Type 'Quest.ChangeAuditor.WebServices...

Revisado el: miércoles, 24 de agosto de 2022
4294483 - Error when installing Coordinator "Could not connect to the SQL Server"

When attempting to install the Coordinator , the following error is displayed by the Installer : Could not connect to the SQL server. If...

Revisado el: miércoles, 24 de agosto de 2022
4289393 - Error when creating a new Exchange mailbox when the Change Auditor Agent is started

When a Change Auditor Agent is deployed to the Exchange server, the following error is displayed in the Exchange Administrative Center when...

Revisado el: miércoles, 24 de agosto de 2022
4224111 - Error when configuring the Coordinator to use Office 365 for the SMTP configuration: ""The SMTP server requires a secure connection or the client was not authenticated"

After configuring the Coordinator to use Office 365 (smtp.office365.com) for the SMTP server and clicking Test SMTP the following error occurs...

Revisado el: miércoles, 24 de agosto de 2022
4352224 - Error when attempting to add new credentials to a NetApp Filer for ChangeAuditor Agent: "NetApp.Manage.NaException: Failed invoking API --- > System.Net.WebException"

Error when attempting to add new credentials to a NetApp Filer for ChangeAuditor Agent: "NetApp.Manage.NaException: Failed invoking API...

Revisado el: miércoles, 24 de agosto de 2022
4225398 - Error that the Service Connection Point cannot be located when trying to change the ports used by the Coordinator

Right clicking the Coordinator System Tray icon and selecting Coordinator Configuration results in the following error: "The service connection...

Revisado el: miércoles, 24 de agosto de 2022
4255541 - Error launching Web Console: "Error HTTP 500.19 - Internal Server Error"

ChangeAuditor Web Console fails to start. When trying to launch the webpage from a browser you may see a "500" or "500.19" error. If you try to...

Revisado el: miércoles, 24 de agosto de 2022
4306221 - Error initializing the Configurator {Service failed retrieving the required InstallationName from the registry!}.

Agent service starts and stops, with the service stuck in stopping mode. Agent log has the following errors and warning:  [ERROR][TorzagLib...

Revisado el: miércoles, 24 de agosto de 2022
4306471 - Error in Logs There is an unclosed literal string. Line 1, position 800.

Error is found in logs when collecting Exchange events with Change Auditor Agent There is an unclosed literal string. Line 1, position 800

Revisado el: miércoles, 24 de agosto de 2022
4354932 - Error in ChangeAuditor Coordinator log file: "The ChannelDispatcher at 'net.tcp://SERVER_NAME:POR

The ChangeAuditor Coordinator may fail to load and / or crash when the ChangeAuditor Client connects to the Coordinator with the following error...

Revisado el: miércoles, 24 de agosto de 2022
4219759 - Error executing command to retrieve cepp.conf recorded in the Change Auditor Agent log

An error similar to the following is recorded in the log file for a Change Auditor agent configured to monitor an EMC File Server: 2016-07-11 04...

Revisado el: miércoles, 24 de agosto de 2022
4220993 - Error encountered when installing the Change Auditor Client on a remote server or workstation

When trying to install the Change Auditor Client on a remote server or workstation, an error is encountered indicating that the application must be...

Revisado el: miércoles, 24 de agosto de 2022
4344624 - Error during Deployment wizard install: "Server already has agent belonging to installation CHANG

Error during Deployment wizard install: "Server already has agent belonging to installation CHANGEAUDITOR. You must connect to a repository in...

Revisado el: miércoles, 24 de agosto de 2022
4346927 - Error during database migration: "Event import failed: An error occurred while writing event data

When using the database migration wizard, the migration will halt with the following error: "Event import failed: An error occurred while writing...

Revisado el: miércoles, 24 de agosto de 2022
4294831 - Can Protected Objects contained in AD Protection Template be modified via PowerShell

Can Protected Objects contained in AD Protection Template be modified via PowerShell ?

Revisado el: miércoles, 24 de agosto de 2022
4299470 - Can PowerShell collect user license information for Change Auditor

I'd like to be able to monitor the licenses used, to ensure we stay under the amount of licenses that we purchase Is their any sample powershell...

Revisado el: miércoles, 24 de agosto de 2022
4294503 - Can one archive db split to several smaller db or drop useless record for shrink db size?

Can an  Archive Database be split into several smaller databases or is it possible to drop useless record to shrink the size?

Revisado el: miércoles, 24 de agosto de 2022
4306812 - Can Office 365 for China or Germany be audited

Can customers from China or Germany use Change Auditor to audit their local version of Office 365 ?

Revisado el: miércoles, 24 de agosto de 2022
4311978 - Can not capture Local Account events on Windows Server 2016 after Windows updated

Can not capture Local Account events on Windows Server 2016 after Windows updated

Revisado el: miércoles, 24 de agosto de 2022
4243161 - Can modules that are not licensed be hidden?

Can unlicensed modules be hidden from the Change Auditor client?

Revisado el: miércoles, 24 de agosto de 2022
4238022 - Can Local account or system accounts be added to the exclusion list of protection templates?

Is it possible to exclude the local system accounts from protection templates?

Revisado el: miércoles, 24 de agosto de 2022
4280423 - Can I use my production license in my test environment?

There is a need to test out the software in a lab environment before deploying in production. Will the production license cover running the...

Revisado el: miércoles, 24 de agosto de 2022
4320379 - Can I target target a specific Coordinator when configuring large scheduled Reports, Purge jobs or Alerts?

An administrator needs to target a specific Coordinator when exporting or running scheduled reports. This will make it possible to select the...

Revisado el: miércoles, 24 de agosto de 2022
4249679 - Can I audit LDAP queries with ChangeAuditor for AD or visa versa?

If we have the Change Auditor for Active Directory Queries license, can we audit AD changes as well?  If we have the Change Auditor for Active...

Revisado el: miércoles, 24 de agosto de 2022
4306903 - Can gMSA account be used with Foreign Forest Agent?

Can gMSA accounts be used in conjunction to the Foreign Forest Agents ?  

Revisado el: miércoles, 24 de agosto de 2022
4231054 - Can ChangeAuditor protect local users and groups

Revisado el: miércoles, 24 de agosto de 2022
4219172 - Can ChangeAuditor protect only certain flags in UserAccountControl?

Administrators may need to be able to select which flags to protect in UserAccountControl attribute rather than protecting the whole attribute. For...

Revisado el: miércoles, 24 de agosto de 2022
4330098 - Can ChangeAuditor be setup to restrict access to event data per Organization unit

Unable to restrict access to audited events based on Active Directory Organization units

Revisado el: miércoles, 24 de agosto de 2022
4294351 - Can ChangeAuditor Dump files be deleted to recover disk space

There are ChangeAuditor dump files in the location "C:\Program Files\Quest\ChangeAuditor\Agent\Plug-in for Active Directory\Dumps". Can we delete...

Revisado el: miércoles, 24 de agosto de 2022
4244086 - Can ChangeAuditor event and database statistics be sent in an automated Change Auditor report

Adminsitrators may require the ability to have the information in the Coordinator -> Statistics delivered in an Automatic report. The report would...

Revisado el: miércoles, 24 de agosto de 2022
4233641 - Can ChangeAuditor Client access be controlled with local administration groups

Can ChangeAuditor Client access be controlled with groups created on the local server and not use the Active Directory based groups.

Revisado el: miércoles, 24 de agosto de 2022
4228210 - Can ChangeAuditor distinguish between password resets and a password change?

Is there a method available for ChangeAuditor to distinguish between a user updating their password or an administrator resetting a user's password?

Revisado el: miércoles, 24 de agosto de 2022
4316450 - Can Change Auditor send alerts only when a number of events occur in a certain amount of time?

Administrators may want to configure an alert to be sent only when a number of events occur in a certain amount of time. For example, if one "File...

Revisado el: miércoles, 24 de agosto de 2022
4294786 - Can Change Auditor track Failed LDAP Bind Queries

Is Change Auditor able to collect Failed LDAP Bind Queries ?

Revisado el: miércoles, 24 de agosto de 2022
4289937 - Can ChangeAuditor be configured internally to route traffic from an Agent machine thorough a certain proxy server to the Coordinator

Is it possible to configure the ChangeAuditor Agent to route the traffic when the Agent connects to the Coordinator to a Proxy Server first...

Revisado el: miércoles, 24 de agosto de 2022
4234569 - Can Change Auditor Smart Alerts be used to see when any one user makes X changes in Y amount of time?

Can Change Auditor report on when a single user makes X amount of changes in Y amount of time? For example, have an alert if a user makes 100 file...

Revisado el: miércoles, 24 de agosto de 2022
4230575 - Can Change Auditor search/alert on a specific Event ID?

Can Change Auditor search/alert on a specific Event ID?

Revisado el: miércoles, 24 de agosto de 2022
4230381 - Can Change Auditor track/audit print jobs on a print server?

Can Change Auditor track/monitor print queues on a print server?

Revisado el: miércoles, 24 de agosto de 2022
4344480 - Can Change Auditor report on the current value of AD attributes?

Can Change Auditor report on the current state or value of an attribute in AD or is it possible to add additional attributes to a report to show...

Revisado el: miércoles, 24 de agosto de 2022
4292216 - Can Change Auditor report on SharePoint Access Level permission?

A security administrator needed to know if Change Auditor can report on existing Access Level permission for a SharePoint Collection.

Revisado el: miércoles, 24 de agosto de 2022
4289576 - Can Change Auditor resend alerts for events?

Is there a way to create an alert search that will go back in history and alert on old events? 

Revisado el: miércoles, 24 de agosto de 2022
4249336 - Can Change Auditor report or alert on what has changed in a files contents

Can Change Auditor show what has changed when the contents of a file changes?

Revisado el: miércoles, 24 de agosto de 2022
4249340 - Can Change Auditor monitor when someone adds a delegate mailbox to their Outlook client?

Can CA report on when users add another mailbox to their Outlook client?

Revisado el: miércoles, 24 de agosto de 2022
4243287 - Can Change Auditor report on File and Folder Count and Size?

Can Change Auditor be used to generate reports on File and Folder Count and Size from a targeted share? 

Revisado el: miércoles, 24 de agosto de 2022
4237343 - Can Change Auditor Search for changes for users based on group membership

Does Change Auditor to have the ability to specify an Active Directory group on the "What" tab and report on user events of the members of that group?

Revisado el: miércoles, 24 de agosto de 2022
4224027 - Can Change Auditor report on stale accounts or accounts that have not logged on in a certain number days?

Need to have Change Auditor generate a report of "Stale Accounts" or accounts that have not logged in in a certain number of days and have that...

Revisado el: miércoles, 24 de agosto de 2022
4349030 - Can Change Auditor evaluate PCNS (Password Change Notification Service) events?

Is there any way for Change Auditor to currently audit events pertaining to PCNS (Password Change Notification Service; ID #2201, 2302, 2303, 2100)?

Revisado el: miércoles, 24 de agosto de 2022
4346959 - Can Change Auditor display which searches are currently being run and by which users?

It would be nice to be able to display which searches are currently being run by users as well as which users are running them for assessment and...

Revisado el: miércoles, 24 de agosto de 2022
4344499 - Can Change Auditor forward events to a SIEM appliance using UDP?

In a firewalled environment which only allowed UDP connections to the SIEM appliance, is it possible for Change Auditor to use UDP instead of TCP...

Revisado el: miércoles, 24 de agosto de 2022
4297435 - Can Change Auditor Integrate with Intrust?

What integration is available for Change Auditor with InTrust.

Revisado el: miércoles, 24 de agosto de 2022
4234603 - Can Change Auditor integrate with Single Sign-On providers?

Can the Change Auditor client be configured to use a third party Single Sign-On provider to allow SSO in the CA Client?

Revisado el: miércoles, 24 de agosto de 2022
4232817 - Can Change Auditor monitor SYSLOG?

Can Change Auditor monitor or report to SYSLOG?

Revisado el: miércoles, 24 de agosto de 2022
4224777 - Can Change Auditor have multiple installations?

Can Change Auditor have multiple installations? For example: one installation for CA for Exchange and one for AD, etc?

Revisado el: miércoles, 24 de agosto de 2022
4219633 - Can Change Auditor install to a database prepared in advance?

A Change Auditor Administrator would like to be able to pre-create a blank database with provisioned DBO access for the CA service account before...

Revisado el: miércoles, 24 de agosto de 2022
4300692 - Can Change Auditor catch events that happen at the Windows OS layer?

Is it possible for Change Auditor to catch audit events that happen on Windows like the Event ID 4688?

Revisado el: miércoles, 24 de agosto de 2022
4288815 - Can Change Auditor collect changes made to Active Roles internal configuration?

Can Change Auditor collect events related to the internal configuration of Active Roles like templates or such?

Revisado el: miércoles, 24 de agosto de 2022
4254885 - Can Change Auditor capture changes to the Local Security Policy?

Does Change Auditor have the ability to capture changes to the Local Security Policy for a server that has a Change Auditor Agent installed?

Revisado el: miércoles, 24 de agosto de 2022
4237836 - Can Change Auditor capture Log-on and Log-off events?

Can Change Auditor capture Log-on / Log-off  events and show details in a report?

Revisado el: miércoles, 24 de agosto de 2022
4229883 - Can Change Auditor be used to protect shares on a SAN?

Change Auditor can protect Windows file servers however can it also be used to protect shares on a SAN?

Revisado el: miércoles, 24 de agosto de 2022
4225372 - Can Change Auditor captured Folder Property Change events from a NetApp server?

Some events that can be gathered from other file system based auditing are not captured from a NetApp server.  One of these events is for...

Revisado el: miércoles, 24 de agosto de 2022
4224568 - Can Change Auditor capture related events when a mailbox is moved from one Exchange database to the other?

An Exchange administrator is in the process implementing mailbox changes and needed to know if Change Auditor will capture events related to moving...

Revisado el: miércoles, 24 de agosto de 2022
4220353 - Can Change Auditor capture when a change is made to the Master Server list for DNS Stub Zones?

Need to track changes made to the Master Server list in DNS Stub Zones

Revisado el: miércoles, 24 de agosto de 2022
4254891 - Can Change Auditor be installed on a WORKGROUP computer?

Administrators may need to install Change Auditor agents on WORKGROUP computers to audit ADAM (Active Directory Lightweight Directory Services...

Revisado el: miércoles, 24 de agosto de 2022
4254782 - Can Change Auditor automatically receive updates that a new version of the application is available for download?

Administrators may desire to have notification in the Change Auditor Client and Change Auditor Web Client when a new version of the product is...

Revisado el: miércoles, 24 de agosto de 2022
4240061 - Can Change Auditor audit SQL database file path change?

In the scenario that user updates the file path of the database files (*.mdf and *.ldf) within the database properties windows, can Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4236399 - Can Change Auditor audit Platform as a Service (PaaS) components such as Azure SQL?

Can Change Auditor support Azure SQL and Azure IIS cloud services, PaaS (Azure SQL) or SaaS (IIS - For Web Client)?

Revisado el: miércoles, 24 de agosto de 2022
4220724 - Can Change Auditor be configured to have multiple Agents monitor a Microsoft SharePoint Farm at the same time?

Some administrators would like to have the option of having multiple Change Auditor Agents configured to audit a Microsoft SharePoint Farm to...

Revisado el: miércoles, 24 de agosto de 2022
4220345 - Can Change Auditor audit read events on an attribute?

Can Change Auditor audit read events on an attribute? For example, when someone has viewed/read a user object attribute.

Revisado el: miércoles, 24 de agosto de 2022
4219795 - Can Change Auditor be configured to not send empty reports?

If a Scheduled Report is executed and produces 0 results, can it be configured so that the report is not sent when it is blank?

Revisado el: miércoles, 24 de agosto de 2022
4310337 - Can Change Auditor alerts show local time inside email body

Revisado el: miércoles, 24 de agosto de 2022
4269593 - Can Change Auditor Audit Workstations?

Can the Change Auditor Agent, when installed on a workstation audit changes on the workstation, such as file, service, registry, etc modifications?

Revisado el: miércoles, 24 de agosto de 2022
4236486 - Can Change Auditor audit Certificate Authority changes?

Can Change Auditor audit events generated by a Certificate Authority?

Revisado el: miércoles, 24 de agosto de 2022
4354062 - Can Change Auditor Agents be updated to point to a different installation name

Can Change Auditor Agents be updated to point to a different installation name without being re-installed? Coordinator was un-installed and re...

Revisado el: miércoles, 24 de agosto de 2022
4306315 - Can Change Auditor Administrators restrict access to individual Searches or Search folders within the Change Auditor Client?

Can Change Auditor Administrators restrict access to individual Searches or Search folders within the Change Auditor Client or Change Auditor Web...

Revisado el: miércoles, 24 de agosto de 2022
4224558 - Can Change Auditor alert when a user account is set to not require a password

Can an alert be created to allow Change Auditor to alert when the passwd_notreqd flag is set on a user account?

Revisado el: miércoles, 24 de agosto de 2022
4223356 - Can Change Auditor 6.5 (or higher) be configured to publish a scheduled report to a file share rather than an email?

In earlier versions of Change Auditor, twhich relied on SQL Server Reporting Services (SSRS), some customers would publish reports to a file share...

Revisado el: miércoles, 24 de agosto de 2022
4235053 - Can an older version of the Coordinator be used to deploy newer agents

In a scenario where a customer needs to deploy new agents to resolve an issue (for example from a new Maintenance Release), but they are not able...

Revisado el: miércoles, 24 de agosto de 2022
4219896 - Can an Alert be saved with just the BCC field entered?

When trying to save an alert with just the BCC field entered (no address on the To field) the button is greyed out. Can an alert be saved with just...

Revisado el: miércoles, 24 de agosto de 2022
4220207 - Can an AD Protection Template be configured to allow changes only from specific Domain Controllers

Would like to configure an AD Protection Template so that only specific accounts can makes changes and only from specific Domain Controllers.

Revisado el: miércoles, 24 de agosto de 2022
4262742 - Can Active Roles Server users be used in Change Auditor protection templates?

When adding an ARS (Active Roles Server) user account to a Change Auditor protection template as the override account, it may not function as...

Revisado el: miércoles, 24 de agosto de 2022
4300422 - Can a share description be audited and included in alerts or reports?

Consider the scenario of creating a Share on a host (that has 'Object Access - Audit File Share' enabled for Success only) and this generates an...

Revisado el: miércoles, 24 de agosto de 2022
4288608 - Can a search be created to find all deleted users based on specific Active Directory attributes

Administrators may need to create a search that will find users removed from Active Directory based on an Active Directory attribute (such as...

Revisado el: miércoles, 24 de agosto de 2022
4254293 - Can a Search be created to filter the "User AccountExpires changed" event when the From is "Not Set"?

When the AD attribute "Account Expires" (AccountExpires) is changed for an Active Directory User account from "Never" to a date, Change Auditor...

Revisado el: miércoles, 24 de agosto de 2022
4243117 - Can a Search be based on the value of an attribute?

Want to monitor all user accounts that have a specific value set for a specific attribute.

Revisado el: miércoles, 24 de agosto de 2022
4236174 - Can a Search be created using the SID of an object?

Is it possible to search for a audit events of an object by searching for the SID of the object?

Revisado el: miércoles, 24 de agosto de 2022
4306624 - Can a protection template be created to allow granular operations on a protected object?

Is it possible to configure a protection template to allow granular changes on a protected object. For example. allow additions to a group...

Revisado el: miércoles, 24 de agosto de 2022
4237742 - Can a Protection Template be used to prevent "Password Never Expires" being set on accounts?

Would like to prevent Password Never Expires from being set on account.

Revisado el: miércoles, 24 de agosto de 2022