Allow auditing of owner events for AD groups and OUs (4361531)

Allow auditing of owner events for AD groups and OUs

By default, when adding mailboxes for auditing, 'Owner' option is disabled except at the user level.

This is by design as owner auditing can cause a very large number of events.

Add the following registry key on the computer where Change Auditor Client is installed:

 

Quest does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at Microsoft Support.

 

Please note: If you have a Change Auditor version prior to 6.9.5, any folder/registry paths referenced may contain a non-Quest branded path.

NOTE 1: Many ‘Owner’ events are disabled by default and will need to be enabled in order to capture these events if the Owner option is selected. NOTE 2: Selecting ‘Owner’ auditing for many mailboxes can produce a very large number of events. This adversely affects Change Auditor auditing and in severe cases the performance of the Exchange Server itself. In extreme cases, Outlook® connections may be slowed or dropped. Select owner auditing for at most only a small number of critical mailboxes.