Chat now with support
Chat with Support

Change Auditor 7.1.1 - Web Client User Guide

Install Change Auditor Web Client Web Client Overview Overview Page Shared Overviews Administration Page Searches Page Search Results Page Administration Tasks Page Configuration Tasks (Administration Tasks Page) Auditing Tasks (Administration Tasks Page) Protection Tasks (Administration Tasks Page) Change Auditor Client Comparison

AD Attribute Auditing page

The AD Attribute Auditing page is displayed when Active Directory | Attributes is selected from the Auditing task list in the navigation pane of the Administration Tasks page. Using the AD Attribute Auditing feature, you can customize Change Auditor to meet your auditing requirements by specifying the individual schema attributes to be audited. In addition to specifying individual attributes for auditing, you can also assign a severity.

 
* 
NOTE: For more information, including a full description of the page, refer to the Quest Change Auditor for Active Directory User Guide.
To define custom attribute auditing:
1
Open the Administration Tasks page.
2
Click Auditing.
3
Select Attributes under Active Directory in the Auditing task list to open the AD Attribute Auditing page.
4
Select an object class from the list and click Edit.
The Active Directory Attributes Auditing Wizard dialog appears, which contains a list of the attributes available for the selected object class.
5
In the Unaudited Attribute list (left pane) select one or more attributes and click Add to select them for auditing.
6
To change the severity level assigned to an attribute, in the right pane, click in the Severity cell and use the drop-down arrow to select the severity you want to assign to the selected attribute.
7
To remove an attribute from auditing, select the attribute from the right pane and click Remove. Selecting this button moves the selected attribute back into the Unmonitored Attribute list.
8
Click Finish to save the selected attributes and close the dialog.
9
Once you have selected at least one attribute for auditing, the associated Audited Attributes column will display the number of attributes selected for auditing. This value will also be displayed in the Audited Attributes column back on the Active Directory Auditing page.

Member of Group Auditing page

The Member of Group Auditing page is displayed when Member of Group is selected from the Auditing task list in the navigation pane of the Administration Tasks page. Using the Member of Group Auditing feature, you can customize Change Auditor to meet your auditing requirements by specifying the users to be audited based on their group membership.

* 
NOTE: For more information, including a full description of the page, refer to the Quest Change Auditor for Active Directory User Guide.
To add a group to the Member of Group Auditing list:
1
Open the Administration Tasks page.
2
Click Auditing.
3
Select Active Directory under the Auditing task list to display the Active Directory Auditing page. Check to ensure that the user object class is removed from auditing and NOT listed on this page. If it is still listed, select it and click Delete | Delete Object Class to remove it from the Active Directory auditing list.
4
Once the user object class has been removed, select Member of Group in the Auditing task list to display the Member of Group Auditing page.
5
Click Add to display the Member of Group Auditing wizard to locate and select the groups whose users are to be audited by Change Auditor.
6
Use the Browse and Search pages to locate and select a group and click Add to add the selected group to the selection list.
Repeat this step to add additional groups to the Member of Groups Auditing list.
7
Click Finish to save your selections, close the wizard and return to the Member of Group Auditing page, where your selections will now be listed.

AD Query Auditing page

The AD Query Auditing page displays when you select AD Query from the Auditing task list in the navigation pane of the Administration Tasks tab. From this page you can specify the Active Directory containers to include and exclude in Active Directory query auditing.

* 
NOTE: By default, all containers are included
* 
NOTE: Due to the high volume of Active Directory queries performed against the Schema, RootDSE, and the Configurations containers, Quest recommends that you add these to the exclusion list.

Inclusion and exclusion rules

Only objects that are included (and not excluded) are monitored. For example:

•
When an object is included and excluded at the same time, it will not be monitored.
•
When an object is included and some of its child objects are excluded, only child objects that are not excluded will be monitored.
•
When an object is excluded and some of its child objects are included, none of the child objects will be monitored.
* 
NOTE: For more information, including a full description of the page, refer to the Change Auditor for Active Directory Queries User Guide.
To include a container to the AD Query audit list:
1
Open the Administration Tasks tab.
2
Click Auditing.
3
Select AD Query (under the Forest heading in the Auditing task list) to open the AD Query Auditing page.
4
Click Add to open the AD Query Auditing wizard.
5
Select one of the scope options at the top of the page:
•
RootDSE - select this option to include the RootDSE object.
•
This Object and All Child Objects - select this option to specify the containers to include. (Selecting a container will also include any child objects.)
6
If the This Object and All Child Objects option is selected, use the Browse and Search pages to locate and select a directory object. Click Add to add the selected directory object to the list at the bottom of the page.
Repeat this step to add additional directory objects.
7
Click Finish to close the wizard and return to the AD Query Auditing page, where your selections will now be listed.
 
To exclude a container to the AD Query audit list:
1
Open the Administration Tasks tab.
2
Click Auditing.
3
Select AD Query (under the Forest heading in the Auditing task list) to open the AD Query Auditing page.
4
Click Add to open the AD Query Auditing wizard.
5
Select one of the scope options at the top of the page:
•
RootDSE - select this option to exclude the RootDSE object. (Selecting this container will not exclude child objects.)
•
This Object and All Child Objects - select this option to specify the containers to exclude. (Selecting a container will also exclude any child objects.)
6
If the This Object and All Child Objects option is selected, use the Browse and Search pages to locate and select a directory object. Click Add to add the selected directory object to the list at the bottom of the page.
Repeat this step to add additional directory objects.
7
Click Finish to close the wizard and return to the AD Query Auditing page, where your selections will now be listed.

ADAM (AD LDS) auditing

Change Auditor for Active Directory allows you to audit Active Directory Application Mode (ADAM) and Active Directory Lightweight Directory Services (AD LDS) events. Use the ADAM (AD LDS) Auditing tasks to define the ADAM instances, the directory objects or containers, the object classes and optionally the individual attributes to be audited.

See the following Administration Tasks page descriptions for more information:

•
ADAM (AD LDS) Auditing page
•
ADAM (AD LDS) Attribute Auditing page
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating