If a user uses a maintenance utility such as NTDSUtil.exe to move the Active Directory database to different location, then Change Auditor will not audit or protect Active Directory database from NinjaCopy (raw volume access) until the Change Auditor agent service is restarted.
NOTE: Change Auditor in this scenario will continue to audit and protect Active Directory database against other kinds of operations (Volume Shadow Copy, NTDSUtil, explorer).WORKAROUND:
Restart the Quest Change Auditor agent service after moving the Active Directory database.
STATUS:
Waiting fix in a future release of Change Auditor
