Active Directory changes are not monitored when a Member Server is promoted to a Domain Controller (4311143)

A member server has a Change Auditor Agent installed which is then promoted to a Domain Controller.

The Change Auditor Coordinator topology still sees the server as a Member Server until the next time the topology is refreshed (every 3 hours by default). As a result, the Agent does not get a full AD Plug-in configuration and AD changes go unmonitored for +-3 hours (depending on when the last topology refresh occurred) +- 15 minutes until the next Agent refresh.

The Domain Controller will not track Active Directory changes for approximately 3 hours after becoming a Domain Controller.

The Change Auditor Coordinator topology still sees the server as a Member Server until the next time the topology is refreshed (every 3 hours by default). As a result, the Agent does not get a full AD Plug-in configuration and AD changes go unmonitored for +-3 hours (depending on when the last topology refresh occurred) +- 15 minutes until the next Agent refresh.

WORKAROUND

1. Refresh the topology as soon as possible following promotion of a Member Server to Domain Controller role.
2. Promote to Domain Controller role directly from workgroup to avoid the condition.

STATUS

Enhancement request TF00201592 has been submitted to Development for consideration in a future release of Change Auditor.