Change Auditor for Active Directory Queries Overview
Introduction
Many applications use Active Directory as an LDAP directory to provide user credentials, group membership information, and other application data. During a directory migration or restructuring project, such as a corporate acquisition, it is important to understand the ways that applications use the directory before migrating the directory structure, to avoid unnecessary application downtime. Obtaining this information from Windows audit logs is extremely difficult, as it requires setting SACLs and aggregating security audit logs from all domain controllers in the environment.
Deployment requirements
Client components/features
|
NOTE: To hide unlicensed Change Auditor features from the Administration Tasks tab (including unavailable audit events throughout the client), use the Action | Hide Unlicensed Components menu command. Note this command is only available when the Administration Tasks tab is the active page. |
NOTE: See Configure AD Query Auditing for information on using these settings for Active Directory query auditing. | |||||||||||||||||||
| |||||||||||||||||||
| |||||||||||||||||||
|
NOTE: See Active Directory Query Searches/Reports for information on using the What tab to create custom Active Directory query search queries. | |||||||||||||||||||
|
NOTE: See the Change Auditor User Guide for a description of these email tags and how to configure alert email notifications. |