Chat now with support
Chat with Support

Change Auditor 7.0.3 - Quick Start Guide

Audit custom user attributes

Active Directory Attribute auditing allows you to specify individual schema attributes to audit.

2
Click Auditing.
3
Select Attributes under Active Directory in the Auditing task list to open the Active Directory Attribute Auditing page.
For example, select the description attribute.
6
To change the severity level assigned to an attribute, in the right-hand list box, place your cursor in the Severity cell and use the drop-down arrow to select the severity you want to assign to the selected attribute.
7
To remove an attribute from auditing, select the attribute from the right pane and click Remove to move the selected attribute back into the Unmonitored Attribute list box.
Open the Searches tab.
Expand the Shared | Built-In | All Events folder in the left pane.
Locate and double-click All Events in the right pane.

Audit users based on their group membership

The Member of Group auditing feature allows you to audit specific users based on their group membership.

2
Click Auditing.
3
Select Active Directory under the Auditing task list to display the Active Directory Auditing page.
4
From this page, select the user object class and click the Delete tool bar button. (By default, Change Auditor monitors all users; therefore, to use this feature, you must first delete the user object class.)
5
From the left pane of the Administration Tasks tab, select Member of Group under Active Directory in the Auditing task list to display the Member of Group Auditing page.
6
Click Add to display the Member of Group Auditing wizard.
7
Use the Browse and Search pages to locate and select a group and click Add to add the selected group to the Selected Objects list at the bottom of the wizard.
Repeat this step until you have selected all of the groups you want to add to the Member of Groups Auditing list. Then click Select to save your selections, close the wizard and return to the Member of Group Auditing page, where your selections will now be listed.
Open the Searches tab.
Expand the Shared | Built-In | All Events folder in the left pane.
Locate and double-click All Events in the right pane.

 

Change Auditor for Windows File Servers

Change Auditor for Windows File Servers allows you to search, report and alert on changes to a specific file or folder or all volumes. You can receive real-time alerts whenever someone tries to access a secure file or folder. The scenarios in this chapter show you how to set up file system auditing.

See Change Auditor Product Specific Features for a list of features/functionality dependent on a specific product license. For more detailed information about file system auditing, see the Change Auditor for Windows File Servers User Guide.

Getting started

2
To view applied licenses, select Help | Licensing from the client.
To view and apply a license, right-click the coordinator icon in the system tray and select Licensing. If required, click Select License to locate and apply the license.
Related Documents