Chat now with support
Chat with Support

Change Auditor for Active Directory 7.1.1 - User Guide

Change Auditor for Active Directory Overview Custom Active Directory Searches and Reports Custom Active Directory Object Auditing Custom Active Directory Attribute Auditing Member of Group Auditing Active Directory Federation Services Auditing ADAM (AD LDS) Auditing Active Directory Database Auditing Active Directory Protection Event Details Pane

Active Directory Federation Services Auditing Wizard

The Active Directory Federation Services Auditing wizard opens when you select Add on the Active Directory Federation Services Auditing auditing page. The following table provides a description of the available fields and controls:
Table 4. Active Directory Federation Services Auditing wizard
Select Active Directory Federation Services Auditing processes to audit: On the first page of the wizard, enter a name for the template.

Template Name

Enter a descriptive name for the auditing template.

Activity

Select the activity to audit. You can choose to audit sign-ins and configuration changes.

ADAM (AD LDS) Auditing

•
Introduction
•
ADAM (AD LDS) Auditing page
•
Enable ADAM (AD LDS) auditing
•
ADAM (AD LDS) Auditing wizard
•
ADAM (AD LDS) event logging

Introduction

Change Auditor allows you to monitor Active Directory Application Mode (ADAM) and Active Directory Lightweight Directory Services (AD LDS) events. AD LDS provides directory services for directory-enabled applications without a risk compromising your Active Directory database.

* 
NOTE: The File and Printer Sharing feature must be enabled under the Windows Firewall before you can set up ADAM auditing or protection.
* 
NOTE: There are some special installation considerations for auditing ADAM (AD LDS) on workgroup servers. Refer to the Installing Change Auditor to Monitor ADAM (AD LDS) on Workgroup Servers appendix in the Change Auditor Installation Guide for more information.

To audit ADAM (AD LDS), you must first define the ADAM instances, the directory objects or containers, the object classes and optionally the individual attributes through the following pages on the Administration Tasks tab:

•
Use the ADAM (AD LDS) Auditing page to create a list of ADAM instances, directory objects or containers, and object classes to monitor.
•
Use the ADAM (AD LDS) Attribute Auditing page to select the individual schema attributes to monitor for the selected object classes.

 

ADAM (AD LDS) Auditing page

The ADAM (AD LDS) Auditing page contains a list of ADAM (AD LDS) instances and the associated object classes selected for auditing. This page displays when you select ADAM (AD LDS) from the Auditing task list in the navigation pane of the Administration Tasks tab.

The ADAM (AD LDS) Auditing page contains an expandable view of the ADAM (AD LDS) instances selected for auditing. The view groups the information by agent, which can be expanded to view the object classes and monitored attributes. To add an instance to this list, click Add. Once added, the following information will be displayed:

* 
NOTE: Authorization to use the administration tasks on the Administrations Tasks tab is defined using the Application User Interface page under the Configuration task list. If you are denied access to the tasks on this page, refer to the Change Auditor User Guide for more information on how to gain access.
Agents
Displays the name of the agent where the ADAM (AD LDS) instance resides. If there are many instances that have replicated partitions, the name of each agent hosting an instance will be displayed.
Object
Displays the distinguished name of the ADAM (AD LDS) instance.
Configuration Set ID
Displays the unique identifier of the configuration set shared between all ADAM (AD LDS) instances that are replicating their application partitions.
Status
Indicates whether the auditing for the ADAM instance is enabled or disabled.
Scope
Displays the scope of coverage:
•
Enterprise
•
Object
•
One Level
•
Subtree
Object Class
This field is used for filtering data.
If the view is not already expanded, click the expansion box to the left of the Instance Agent name to expand the view to display the following details:
Object Class
Displays the object class selected for auditing (such as container, user, and group).
Monitored Attributes
Displays the number of schema attributes selected for auditing by Change Auditor for each object class listed.
* 
NOTE: The cells directly under the main heading rows are used for filtering data. That is, as you enter characters into these cells, the client will redisplay the templates that meet the search criteria (i.e., comparison operator and characters entered). For more details about using the data filtering function provided throughout the client, see the Quest Change Auditor User Guide.
* 
NOTE: If credentials are needed in order to connect to the selected ADAM (AD LDS) instance, a credentials required dialog will be displayed prompting you to enter the appropriate credentials.

The page consists of the following information/controls:

Attributes list
The list box located across the top of this page lists the object classes that can be selected to define attribute auditing. More specifically, this list box contains the object classes selected on the ADAM (AD LDS) Auditing page.
In addition to the name of the object class, the following information is also displayed:
•
the assigned severity
•
number of custom attributes selected for auditing
•
the names of the different schema classes available for auditing
•
the name of the agent where the associated ADAM (AD LDS) instances resides. If there are many instances that have replicated partitions, the name of each agent hosting an instance will be displayed.
•
Displays the unique identifier of the configuration set shared between all ADAM (AD LDS) instances that are replicating their application partitions.
Selecting an entry in this list, will populate the list boxes across the bottom of the dialog with the applicable attributes.
Unmonitored Attribute list
The list box located in the lower left-hand pane displays the attributes that are currently not being audited for the schema class selected in the Attributes list.
Monitored Attribute list
The list box located in the lower right-hand pane contains the attributes that are currently selected for auditing for the schema class selected in the Attributes list.
In addition to the attribute, the assigned severity is also displayed. To change the severity level assigned to an attribute, place your cursor in the Severity cell and use the drop-down arrow to select the severity you want to assign to the selected attribute.
Add
Select one or more attributes from the Unmonitored Attribute list and click Add to select them for auditing. The selected attributes will be moved to the Monitored Attribute list box.
* 
NOTE: You can also double-click an attribute to select it for auditing or ‘drag and drop’ it into the Monitored Attribute list.
Remove
Select one or more attributes from the Monitored Attribute list and click Remove to remove them from auditing. The selected attribute will then be moved back to the Unmonitored Attribute list box.
* 
NOTE: You can also double-click an attribute to remove it from auditing or ‘drag and drop’ it back into the Unmonitored Attribute list.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating