Chat now with support
Chat with Support

Change Auditor for Logon Activity 7.4 - User Guide

Change Auditor for Logon Activity Overview

•
Introduction
•
Benefits and features
•
System requirements
•
Client components and features

Introduction

Increasing compliance regulations and security concerns make automated, reliable and complete tracking of user activity essential in organizations today. Change Auditor for Logon Activity captures, alerts, and reports on all user logon and log off activity, and promotes better security, auditing and compliance across your enterprise.

•
 

Benefits and features

Change Auditor for Logon Activity offers system-wide visibility, consolidated auditing reports, user activity analysis, automated collection of logon events and a centralized view. Calculated workstation session events deliver an overview of the session in a single event, including the total session length and the reason for logoffs.

More specifically, it provides the following features:

•
Compliance-ready: Fulfills and simplifies collection of logon activity for major external regulations and internal security policies.
•
Real-time alerts on the move: Sends critical alerts on access attempts (both successful and failed logons) via email and mobile devices to prompt immediate action, enabling you to respond faster to security threats even while you’re off-site.
•
Security awareness: Easily discerns user logon by type (interactive, remote, local or network) to help identify suspicious activity.
•
Related searches: Provides instant, one-click access to all information on the event you’re viewing and all related activity, eliminating guesswork and unknown security concerns.
•
Best practice reporting: Provides system visibility with comprehensive reports for best practices, such as access reports, successful logons, failed logons, authorization comparison reports and reports grouped by users.
•
Event timeline: Enables the viewing, highlighting and filtering of logon activity and related change events over time for better forensic analysis of events and trends.
•
Web-based access with dashboard reporting: Searches from anywhere using a web browser, and creates targeted dashboard reports that provide upper management and auditors with access to the information they need without having to understand architecture or administration.

Change Auditor Logon Activity auditing consists of two licenses that allow you to collect logon and log off activity for both servers and workstations.

•
The Change Auditor for Logon Activity User license enables server agents to capture the following events:
•
Authentication activity (interactive, remote interactive and network logons) including successful and failed logons performed on monitored servers
•
Domain Controller authentication activity (Kerberos), including successful and failed requests (available for Domain Controller agents only)
•
User logon session activity (the actual time spent on a server)
•
The Change Auditor for Logon Activity Workstation license enables workstation agents to capture the following events:
•
Authentication activity (interactive, remote interactive and network logons), including successful and failed logons performed on monitored workstations
•
User logon session activity (the actual time spent on a workstation)

System requirements

For a successful deployment, ensure that your environment meets the minimum system requirements. For information on system requirements, see the Change Auditor Release Notes. For details on installing Change Auditor, see the Change Auditor Installation Guide.

* 
NOTE: Starting with Change Auditor 6.5, the dependency on InTrust and the Change Auditor Data Gateway Service to capture logon activity is eliminated.
Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating