Return
-
Title
How to exclude Domain Controllers, or devices which are not Domain Controllers from auditing -
Description
How to exclude Domain Controllers, or devices which are not Domain Controllers from auditing.
-
Cause
In some environments, certain servers may need to be excluded from Active Administrator auditing. Other servers or devices may appear in the list of available servers which are not Domain Controllers.
-
Resolution
Open the Active Administrator Console > Auditing and Alerting > Agents.
If the name of the undesired object appears on the list of agents, right click on the device and select 'Remove'. Even if the device does not have an audit agent installed, this will remove the entry from the database.
Go to the ribbon at the top of the window and select More menu > 'Excluded Domain Controllers'
Use the resulting window to select the names of any device you wish to exclude from being listed as eligible for auditing.