How to alert on new computers or domain controllers added to the domain
説明
This solution outlines how to alert on new domain controllers or computers added to the Active Directory domain.
対策
How to create an alert for new domain controllers:
Open the Active Administrator Console
Select Auditing & Alerting | Agents.
Click Auto Deployment at the top
On the General tab, select Enable automated agent deployment and notification.
Select Only notify users.
Use the buttons to add, edit, or remove email addressed from the list.
Click OK
How to create an alert based on new computers added to Active Directory:
Open the Active Administrator Console
Select Auditing & Alerting | Alerts
There is a pre-existing alert called "Computers" which is enabled by default. This will alert based on new computers, modifications made to computers and computers deleted. You can modify this alert or follow the additional steps below to create your own.
Select New at the top and then enter an Alert Name and click Next
Add an email address if you would like and click Next
Scroll down the alerts and enable "Computer Account Created" and click Next
The next screens allow you to add a Filter, Quiet Time, Thresholds, and an Action. Configure any of these if required.