What's new for Change Auditor

When you add, delete or modify in a zone which already exists, no events are recorded when adding a New Domain. New audit events are created when...

Foreign Forest credential requirement for search properties

After May 14th, 2024, the Change Auditor agent is not working on a Domain Controller running Windows Server 2022 and there are Cannot find...

After May 14th, 2024, the Change Auditor agent is not working on a Domain Controller running Windows Server 2016 or 2019 and there are 'Cannot find...

Is Change Auditor using SMB1?

How Change Auditor uses Lsass?

Pueden existir circunstancias en que es necesario instalar manualmente el Agente de Change Auditor en un servidor remoto por ejemplo no poder / no...

DNS A and DNS PTR records not being tracked

Is there a way to determine which agents are performing specific auditing, such as Windows File System, SQL, NetApp, etc?

Would like to alert when changes have been added to the domain administrators group.

There is a need to know what permissions administrators and operators have in the ChangeAuditor Client?

How do I create a search to see file and folder access rights changes?

On non-US English Microsoft Windows systems the WebClient displays 'Invalid Date' in the event's When field. In some situations you may also see a...

Does Quest offer a module for monitoring Panzura devices in Change Auditor?

 Active Directory Container objects are not monitored by default in Change Auditor for Active Directory, this schema class must be manually enabled.

Foreign forest agents are showing as inactive after upgrade from 7.0.4 which were previously manually installed. I've logged into those hosts and...

Report delivery automatically compresses the report when is it larger than 1 MB. Is there any method to increase the threshold when this occurs?

Is there a way to customize or change the report filters after the SQL Reporting Services (SRS) reports are created via the ChangeAuditor Client?

ChangeAuditor doesnt pickup Sharepoint Online - Site Creation/Deletion ; Site List Creation/Deletion.

Some reports that contain a large amount of data and have a large file size are not received.

An administrator needs to receive an alert email when a user's account is locked.

After a failed attempt to deploy Agents across the environment, if a requirement is missed, Change Auditor will not reattempt to deploy the...

When upgrading the Change Auditor Web Client to a newer version, the error  "Failed to get the service address for the coordinator" may appear.

This document will provide the steps for creating a Change Auditor File System Template.

An administrator need to configure a Search/Alert for changes to the ObjectSID attribute of a specific user account.

Following upgrade unable to logon to Change Auditor Client, error "access denied, "domain\useraccount" does not have the required permissions to...

This document describes the steps for configuring SQL data level Audit in Change Auditor 

Can Change Auditor audit events generated by a Certificate Authority?

When an Azure AD user is created with a temporary UPN (due to duplicates or other reasons), or the UPN gets changed, it looks like Change Auditor...

After a user has been added to the ChangeAuditor Operators - <installation name> group in Active Directory, the user is unable (has no permission...

An administrator needs to know how to find all the Coordinator listening ports to open in his DMZ Firewall for a server with a Change Auditor agent.

Can Change Auditor collect events related to the internal configuration of Active Roles like templates or such?

"Error running bulk insert audit event" error in the logs.

What is the syntax to exclude folder path on EMC Isilon.

When an active directory group's membership is modified, the change auditor alert's initiator filed is blank if the source if Change Auditor.

Can Change Auditor search/alert on a specific Event ID?

During deployment from ChangeAuditor console for unknown reason the installation may fail on the remote server. The Coordinator may not receive...

The Change Auditor Client and ChangeAuditor Agents automatically detect where the Coordinator is installed. How is this done?

How to access an old database as an archive

When the Change Auditor Coordinator is first installed in an environment, a large number of "Topology Server Added" events are recorded by Change...

In the video below we go over the steps to setup auditing for Windows File Servers

How to setup an alert for AD Queries Performed when Elapsed value is above a certain threshold

How to monitor attributes on AD objects, like ServicePrincipalName with Change Auditor

Change Auditor (CA) Integration with On Demand Audit (ODA) stuck in the login screen with spinning wheel and please wait message If you upgrade an...

Please follow the steps below when troubleshooting High CPU/RAM usage of the Change Auditor Agent

In the Web Client Searches tab, when opening a search, when attempting to filter on one of the columns, the case needs to be typed exactly as the...

Change Auditor (CA) is not integrating with Active Roles (AR) operations and does not provide the correct Initiator name. Also: is it possible to...

How does the Foreign Forest Agent communicates with the Coordinator Domain ?

An administrator recently migrated the Change Auditor database and Coordinator to a new server, however some agents are lo longer recording events.

Would like to know the recommendation for SQL. Can everything be installed on the same server with SQL Express or should this be put on a full...