Change Auditor 7.5 - User Guide

Member of Group auditing list

Member of Group auditing list

NOTE: The cells directly under the main heading rows are used for filtering data. That is, as you enter characters into these cells, the client will redisplay the groups that meet the search criteria (i.e., comparison operator and characters entered). For more details about using the data filtering function provided throughout the Change Auditor client, see the Quest Change Auditor User Guide.

To add a group to the Member of Group Auditing list:

1	Open the Administration Tasks tab.

2	Click Auditing.

3	Select Active Directory under the Auditing task list.

Ensure that the user object class is removed from auditing and not listed on this page. If it is still listed, select it and click Delete to remove it.

4	Once the user object class has been removed, select Member of Group in the Auditing task list.

5	Click Add to open the Member of Group Auditing wizard to locate and select the groups whose users are to be audited.

6	If required, use the Forest drop-down to select the forest where the objects are located. Foreign agent forests may require foreing forest credentials which you can enter on the Credentials Required dialog.

7	Use the Browse and Search pages to locate and select a group and click Add to add them.

Repeat this step to add additional groups.

8	Click Select to save your selections, close the wizard and return to the Member of Group auditing page, where your selections will now be listed.

NOTE: When entering foreign forests credentials in the Credentials Required dialog, the "Save credential" will be forced to be enabled. This is due to the credentials being used for Group Membership Expansion of the foreign forest group. The credentials can be managed by clicking the Foreign Forest button on the Deployment tab.

To delete a group from the Member of Group Auditing list:

1	On the Member of Group auditing page, select the group to remove from auditing.

2	Click Delete.

3	Click Yes to confirm.

Member of Group Auditing wizard

Member of Group Auditing wizard

The Member of Group Auditing wizard opens when you click Add on the Member of Group auditing page and allows you to locate and select Active Directory groups to audit. The following table provides a description of the available fields and controls.

 

Table 3. Member of Group Auditing wizard

Select Groups to Audit page: On this page select the groups to be audited.
Browse page	Displays a hierarchical view of the containers in your environment allowing you to locate and select the groups to audit. Once you have selected a group, click Add to move the group to the list at the bottom of the page.
Search page	Use the controls at the top of the Search page to search your environment to locate the groups to audit. Once you have selected a group, click Add to move the group to the list at the bottom of the page.
Options page	Use the Options page to modify the search options used to retrieve directory objects.
Selection list	The groups selected for auditing are displayed in the list box located across the bottom of this page. Use the buttons located above this list box as described below: • Add - Select a group in the Browse or Search page to add it to the selection list. • Remove - Select an entry in the selection list to remove it.

 

Active Directory Federation Services Auditing

Active Directory Federation Services Auditing

•	Introduction

•	Active Directory Federation Services Auditing page

•	Active Directory Federation Services auditing templates

•	Active Directory Federation Services Auditing Wizard

Introduction

Introduction

Change Auditor allows you to monitor sign-ins and configuration changes made through Active Directory Federation Services.

NOTE: A Change Auditor Logon Activity license is required to capture the sign-in events. A Change Auditor for Active Directory license is required to capture the configuration changes events.

To capture these events, you must:

•	Create an Active Directory Federation Services template.

•	Add this template to an agent configuration.

•	Assign the agent configuration to agents.

This chapter includes a description of the Active Directory Federation Services auditing pages in the Administration Tasks tab, the procedure for creating and working with Active Directory Federation Services auditing templates.