Chat now with support
Chat with Support

Change Auditor 7.0.3 - Web Client User Guide

Install Change Auditor Web Client Web Client Overview Overview Page Shared Overviews Administration Page Searches Page Search Results Page Administration Tasks Page Configuration Tasks (Administration Tasks Page) Auditing Tasks (Administration Tasks Page) Protection Tasks (Administration Tasks Page) Change Auditor Client Comparison

Excluded Accounts auditing

Account exclusion allows you to define a list of trusted accounts to exclude are from auditing. This enables you to exclude events generated by accounts that make many changes or by accounts which are trusted.

To use the account exclusion feature, you must first complete the following steps to define the user and computer accounts that can make changes without triggering an event in Change Auditor:

The Excluded Accounts Auditing page is displayed when Excluded Accounts is selected from the Auditing task list in the navigation pane of the Administration Tasks page. It contains an expandable view of all the Excluded Accounts templates that have been defined. From this page, you can launch the Excluded Accounts wizard to create a template. You can also edit existing templates, disable and enable templates, or remove templates that are no longer being used.

2
Click Auditing.
3
Select Excluded Accounts (under the Configuration heading in the Auditing task list) to open the Excluded Accounts Auditing page.
4
Click Add to open the Excluded Accounts wizard which steps you through the process of creating an Excluded Accounts template.

Welcome

Name your template.

2
Click Next.

Account Selection

Select the accounts to exclude.

See Directory object picker for a detailed description of this wizard page.

Click Add Wildcard to add it to the selection list.
3
Click Next.

Event/Facility Selection

Select the event classes and facilities to exclude.

Add | Add This Event to add individual events.
Add | Add All Events In Facility to add all events in the selected facility.
3
Click Finish to save the template and close the wizard.

Forest

The tasks under this heading are used to define custom auditing definitions for your Active Directory forest.

See the following administration task descriptions for more information:

Active Directory auditing

By default, Change Auditor for Active Directory audits the Enterprise for changes made to the user, group, and computer objects. However, using the Active Directory auditing tasks you can specify where to conduct the audit (Enterprise, an individual object, and so on) and what to audit, such as the object classes, individual attributes, and even users based on group membership.

In addition, if you have Change Auditor for Active Directory Queries licensed, you can specify Active Directory containers to exclude from AD query auditing.

See the following Administration Tasks page descriptions for more information:

Active Directory Auditing page

The Active Directory Auditing page opens when Active Directory is selected from the Auditing task list in the navigation pane of the Administration Tasks page, and contains an expandable view of the Active Directory objects selected for auditing. Initially, the list box contains an entry for auditing all user, computer, and group object classes in the entire enterprise.

2
Click Auditing.
3
Select Active Directory in the Auditing task list to display the Active Directory Auditing page.
4
Click Add to open the Active Directory Auditing wizard, which steps you through the process of defining the objects and object classes to audit.

Object Selection

Select the Active Directory objects to audit.

See Directory object picker for a detailed description of this wizard page.

2
If you selected the This Object, This Object and Child Objects Only or This Object and All Child Objects option, use the Browse or Search pages to locate the directory object or container to be audited.
3
Click Next.

Object Classes

Select object classes to audit under the selected container.

2
Click Add to move it to the Audited Object Class list (right pane).
3
Click Finish to save your selection and close the wizard.
Related Documents