What's new for Change Auditor

This guide includes information to help you add and use the Windows PowerShell commands available to manage your Change Auditor deployment.

Lists the audit events and built-in reports available with Change Auditor for Authentication Services.

Describes the additional client features available with Change Auditor for Authentication Services.

Describes the major enhancements and features introduced with the release of Change Auditor version 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1, 7.1.1...

Provides a description of the main components in the Change Auditor web client when launched using a standard browser and basic procedures for...

Describes the core Change Auditor client features. Including client overview, agent deployment, searches, alerts, administration tasks, agent and...

This guide is intended for customers who want to access and reuse the rich event data gathered by Change Auditor. It describes the configuration...

Describes Change Auditor new features, resolved and known issues, system requirements, licensing and getting started information.

Provides information on setting up Change Auditor in a test environment. It provides walkthroughs to assist you in getting familiar with using the...

Provides information about the additional Microsoft 365 and Microsoft Entra ID auditing features that are available when a valid Change Auditor for...

A description of all Microsoft 365 and Microsoft Entra ID events that can be captured when you have a license for Change Auditor for Active...

Provides the information required to install, configure and upgrade Change Auditor.

Deployment overview and requirements to use Change Auditor in a FIPS environment.

Lists the core audited events available in Change Auditor regardless of the Change Auditor product license that is applied.

Lists the criteria used to generate the built-in reports provided with Change Auditor, which allow you to quickly retrieve configuration change...

Lists the audit events available with Change Auditor for Logon Activity.

Describes the additional client features available with Change Auditor for Logon Activity. Also provides a feature comparison between the server...

Describes the additional client features available with Change Auditor for Windows File Servers.

Lists the audit events available with Change Auditor for Windows File Servers.

Lists the audit events available with Change Auditor for SQL Server.

Describes the additional client features available with Change Auditor for SQL Server.

Provides installation and configuration instructions in addition to describing the additional client features available with Change Auditor for...

Lists the audit events available with Change Auditor for SharePoint.

Lists the audited events available with Change Auditor for NetApp.

Provides installation and configuration instructions in addition to describing the additional client features available with Change Auditor for...

Describes the additional client features with Change Auditor for Exchange.

Lists the audit events available with Change Auditor for Exchange.

Provides installation and configuration instructions in addition to describing the additional client features available with Change Auditor for EMC.

Lists the audit events available with Change Auditor for EMC.

This guide describes the deployment requirements for auditing Defender as well as the available searches.

Lists the audit events and built-in reports available with Change Auditor for Defender.

Describes the additional client features and events available with Change Auditor for Active Directory Queries.

Lists the audit events available with Change Auditor for Active Directory.

Describes the additional client features available with Change Auditor for Active Directory.

Provides a technical insight into the product components, operations and processes for IT specialists responsible for deploying, configuring and...

Change Auditor provides total auditing and security coverage for your enterprise network. Change Auditor audits the activities taking place in...

Can't find specific events after upgrading Exchange Server to 2019 CU15

Neil, a solution architect at Quest Software, discusses how to configure Change Auditor for SQL data-level auditing. He emphasizes that data...

Neil, a solution architect at Quest Software, discusses configuring Change Auditor for SQL Server auditing. He emphasizes the need to use the...

SMTP Error: Change Auditor client displaying "Service not available, closing transmission channel. The server response was: 4.3.2 Service not...

SMTP Error: Failed to send the test message. Service not available, closing transmission channel. The server response was: 4.3.2 Service not...

PowerShell Scripts to create an Azure AD template in Change Auditor

Enabling events on Event Logging dialog in Change Auditor

Upgrade Change Auditor 7.x to 7.6

Steps to manually install an agent in a foreign forest

Steps to deploy Change Auditor Agent from the Change Auditor Client

How do you export or import the Change Auditor configuration to allow it to be re-imported into a newly installed Change Auditor instance/database?

Every two minutes on the Domain Controller where Azure AD Connect is installed an "Irregular Domain Replication Activity Detected" event is...

Replace old CA servers (Coordinator) with a new ones. 

Service or machine accounts (SERVERNAME$) can be a source of significant amounts of database clutter or noise. If there are no security...

How to create an Excluded Account Template for a local user, when you see such events as " Local User logged On".

Trying to do Always on SQL Cluster and am trying to use the group listener name to connect to the database and I get the following error: Agent...

Is it possible to update the Change Auditor installation name, once the installation is completed and has been running.

"Error running bulk insert audit event" error in the logs.

Receiving the below warning in the agent logs even though the agent appears to be working fine overall: ID: 10341 Time: 1/26/24 14:04:34.263...

When attempting to create a new Active Directory Protection Template or edit an existing Active Directory Protection Template, an " Access Denied...

When navigating to Protection Templates in the ChangeAuditor Client, the Edit button is grayed out. The account is a member of the...

An administrator needs to find the events associated with an Active Directory Group account that was deleted. Not able to target the account by...

In some cases, Change Auditor is showing a an incorrect source computer for a Locked Out Event

When using for example, the Logon Activity User module to capture domain user logons from all workstations, and the Event Class "User performed a...

The most common list of issues related to the Change Auditor Agent service and connectivity

No SCP can be found. Recreating the SCP (Service Connection Point) is necessary.

When Change Auditor is auditing a SQL server, events are not being generated with a correctly configured and assigned template.

The following error was displayed when creating a new mail box after enabling the Exchange Scripting Agent:  The following error occurred during...

Dot net 4.8 is installed. Error received: Change Auditor Error loading properties: Server Error in '/' Application...

A coordinator server is being decommissioned or removed. Would like to remove all Quest software beforehand to ensure agents connect to new or...

What are the best practices that should be considered for a Change Auditor deployment?

Upgrade Change Auditor 7.x to 7.4

Upgrade Change Auditor 7.x to 7.5

How to set up Azure AD auditing in Change Auditor.

How to update the ChangeAuditor Web Client to configure it connect to correct Change Auditor Coordinator and Port.