Chat now with support
Chat with Support

Change Auditor 7.2 - Whats New

What's New in Change Auditor 7.2 What's New in Change Auditor 7.1.1 What's New in Change Auditor 7.1 What's New in Change Auditor 7.0.4 What's New in Change Auditor 7.0.3 What's New in Change Auditor 7.0.2 What's New in Change Auditor 7.0.1 What's New in Change Auditor 7.0

Foreign forest support

The following is supported in environments where a coordinator does not exist in the foreign forest where agents are deployed:

•
Ability to select objects in a foreign forest in the Exchange protection wizard.
•
Ability to select objects in a foreign forest in the Group Policy protection wizard.
•
Users are notified in the client when the foreign forest cannot be contacted when performing a “Force Refresh”.
•
Support for foreign forest objects in the Add-CASearch and Set-CASearchProperties commands.

Additional events

Events to audit when a change is made to the coordinators selected for purge, archive or report jobs:

•
Coordinator added to scheduled task processing
•
Coordinator removed from scheduled task processing
•
Scheduled task processing assignment changed
•
Scheduled task processing setting changed

Events to audit failed client logons:

•
Change Auditor unknown client logon failed
•
Change Auditor Windows client logon failed
•
Change Auditor web client logon failed
•
Change Auditor PowerShell client logon failed

Events to audit changes to the “Inheritance” option on the security tab for Active Directory objects:

•
Inheritance setting changed on computer object
•
Inheritance setting changed on group object
•
Inheritance setting changed on user object
•
Inheritance setting changed on AdminSDHolder object
•
Inheritance setting changed on OU object
•
Inheritance setting changed on group policy object

Internal events are now generated when changes are made to file system templates through PowerShell commands. Previously these events were only generated when changes were made through the Windows client.

Additional platform support

The following support has been added:

•
Microsoft Exchange Server 2016 CU19, CU20, CU21, and CU22
•
Microsoft Exchange Server 2019 CU8, CU9, CU10, and CU11
•
Windows Server 2022 for Active Directory, Registry, Group Policy, Service, Local Account, AD Query, Logon Activity, and ADFS auditing
•
Windows 11 for client installations
•
CEE 8.7.8.2 for EMC auditing
•
One Identity Defender 5.11
•
Active Roles 7.4 and 7.5
•
Authentication Services 5.0 and 5.0.1
•
NetApp 9.8
•
GPOADmin 5.16

The following support has been removed:

•
NetApp auditing on 7-Mode servers
•
NetApp cluster mode auditing on servers older than 8.1
•
Windows Serve Core 1809, 1903, 1909
•
Auditing of SharePoint 2010
•
Auditing of VMware. Note that auditing will still be supported with 7.1.1 (and older) agents.

Miscellaneous features and enhancements

•
Update to the label on the SIEM and On Demand Audit event subscription pages to indicate that “Last event time” is show in UTC time.
•
Performance improvements in sending of events to Splunk.
•
Added the email address and the “managed by” property of a user as new columns available for searches. Additional associated email tags are also available: %AD_USERMAIL% and %AD_MANAGEDBY%.
•
Performance improvements made to the process of retrieving the site information when doing a topology scan in environments that have a large number of subnets.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating