立即与支持人员聊天
与支持团队交流

Change Auditor for Active Directory 7.0.2 - User Guide

ADAM (AD LDS) Auditing

•
Introduction
•
ADAM (AD LDS) Auditing page
•
Enable ADAM (AD LDS) auditing
•
ADAM (AD LDS) Auditing wizard
•
ADAM (AD LDS) event logging

Introduction

Change Auditor allows you to monitor Active Directory Application Mode (ADAM) and Active Directory Lightweight Directory Services (AD LDS) events. AD LDS provides directory services for directory-enabled applications without a risk compromising your Active Directory database.

* 
NOTE: The File and Printer Sharing feature must be enabled under the Windows Firewall before you can set up ADAM auditing or protection.
* 
NOTE: There are some special installation considerations for auditing ADAM (AD LDS) on workgroup servers. Refer to the Installing Change Auditor to Monitor ADAM (AD LDS) on Workgroup Servers appendix in the Change Auditor Installation Guide for more information.

To audit ADAM (AD LDS), you must first define the ADAM instances, the directory objects or containers, the object classes and optionally the individual attributes through the following pages on the Administration Tasks tab:

•
Use the ADAM (AD LDS) Auditing page to create a list of ADAM instances, directory objects or containers, and object classes to monitor.
•
Use the ADAM (AD LDS) Attribute Auditing page to select the individual schema attributes to monitor for the selected object classes.

 

ADAM (AD LDS) Auditing page

The ADAM (AD LDS) Auditing page contains a list of ADAM (AD LDS) instances and the associated object classes selected for auditing. This page displays when you select ADAM (AD LDS) from the Auditing task list in the navigation pane of the Administration Tasks tab.

The ADAM (AD LDS) Auditing page contains an expandable view of the ADAM (AD LDS) instances selected for auditing. The view groups the information by agent, which can be expanded to view the object classes and monitored attributes. To add an instance to this list, click Add. Once added, the following information will be displayed:

* 
NOTE: Authorization to use the administration tasks on the Administrations Tasks tab is defined using the Application User Interface page under the Configuration task list. If you are denied access to the tasks on this page, refer to the Change Auditor User Guide for more information on how to gain access.
Agents
Displays the name of the agent where the ADAM (AD LDS) instance resides. If there are many instances that have replicated partitions, the name of each agent hosting an instance will be displayed.
Object
Displays the distinguished name of the ADAM (AD LDS) instance.
Configuration Set ID
Displays the unique identifier of the configuration set shared between all ADAM (AD LDS) instances that are replicating their application partitions.
Status
Indicates whether the auditing for the ADAM instance is enabled or disabled.
Scope
Displays the scope of coverage:
•
Enterprise
•
Object
•
One Level
•
Subtree
Object Class
This field is used for filtering data.
If the view is not already expanded, click the expansion box to the left of the Instance Agent name to expand the view to display the following details:
Object Class
Displays the object class selected for auditing (such as container, user, and group).
Monitored Attributes
Displays the number of schema attributes selected for auditing by Change Auditor for each object class listed.
* 
NOTE: The cells directly under the main heading rows are used for filtering data. That is, as you enter characters into these cells, the client will redisplay the templates that meet the search criteria (i.e., comparison operator and characters entered). For more details about using the data filtering function provided throughout the client, see the Quest Change Auditor User Guide.
* 
NOTE: If credentials are needed in order to connect to the selected ADAM (AD LDS) instance, a credentials required dialog will be displayed prompting you to enter the appropriate credentials.

The page consists of the following information/controls:

Attributes list
The list box located across the top of this page lists the object classes that can be selected to define attribute auditing. More specifically, this list box contains the object classes selected on the ADAM (AD LDS) Auditing page.
In addition to the name of the object class, the following information is also displayed:
•
the assigned severity
•
number of custom attributes selected for auditing
•
the names of the different schema classes available for auditing
•
the name of the agent where the associated ADAM (AD LDS) instances resides. If there are many instances that have replicated partitions, the name of each agent hosting an instance will be displayed.
•
Displays the unique identifier of the configuration set shared between all ADAM (AD LDS) instances that are replicating their application partitions.
Selecting an entry in this list, will populate the list boxes across the bottom of the dialog with the applicable attributes.
Unmonitored Attribute list
The list box located in the lower left-hand pane displays the attributes that are currently not being audited for the schema class selected in the Attributes list.
Monitored Attribute list
The list box located in the lower right-hand pane contains the attributes that are currently selected for auditing for the schema class selected in the Attributes list.
In addition to the attribute, the assigned severity is also displayed. To change the severity level assigned to an attribute, place your cursor in the Severity cell and use the drop-down arrow to select the severity you want to assign to the selected attribute.
Add
Select one or more attributes from the Unmonitored Attribute list and click Add to select them for auditing. The selected attributes will be moved to the Monitored Attribute list box.
* 
NOTE: You can also double-click an attribute to select it for auditing or ‘drag and drop’ it into the Monitored Attribute list.
Remove
Select one or more attributes from the Monitored Attribute list and click Remove to remove them from auditing. The selected attribute will then be moved back to the Unmonitored Attribute list box.
* 
NOTE: You can also double-click an attribute to remove it from auditing or ‘drag and drop’ it back into the Unmonitored Attribute list.

Enable ADAM (AD LDS) auditing

To enable ADAM (AD LDS) auditing:
1
Open the Administration Tasks page.
2
Click Auditing.
3
Select ADAM (AD LDS) in the Auditing task list.
4
Click Add to open the ADAM (AD LDS) Auditing wizard.
5
Select an ADAM (AD LDS) instance from the displayed list. This list includes the ADAM (AD LDS) instances found in your environment. Only instances running on computers with a Change Auditor agent installed display in this list.
6
On the second page of the wizard, use the Browse or Search pages to locate and select a directory object or container to audit.
7
On the Select Object Class page, use one of the following methods to move an object class from the UnAudited Object Class list to the Audited Object Class list:
•
Select one or more object classes in the UnAudited Object Class list and click Add.
•
Select one or more object classes in the UnAudited Object Class list and ‘drag and drop’ the selected object classes into the Audited Object Class list.
•
Double-click an object class in the UnAudited Object Class list.
8
After selecting one or more object classes, click Finish to save your selection and close the wizard.
Change Auditor will then audit for events such as object created, deleted, moved, renamed and modified for the objects selected. However, to audit individual ADAM (AD LDS) attributes for these objects, you must specify the attributes to be audited using the ADAM (AD LDS) Attribute Auditing page.
9
On the Administration Tasks tab, select ADAM (AD LDS) | Attributes in the Auditing task list to open the ADAM (AD LDS) Attribute Auditing page.
10
Select an object class from the list box located across the top of this page. (This list contains the object classes selected on the ADAM (AD LDS) Auditing page.) Selecting an entry in this list will populate the list boxes across the bottom of the page with the applicable attributes.
11
In the Unmonitored Attribute list, located in the lower left-hand pane of this page, select one or more attributes and click Add to select them for auditing. The selected attributes will be moved to the Monitored Attribute list.
You can also double-click an attribute to select it for auditing or ‘drag and drop’ it into the Monitored Attribute list.
12
To change the severity level assigned to an attribute, in the Monitored Attribute list, place your cursor in the Severity cell, click the arrow control and select the severity you want to assign to the selected attribute.
13
To remove an attribute from auditing, select the attribute in the Monitored Attribute list and click Remove. The selected attribute will then be moved back into the Unmonitored Attribute list.
You can also double-click an attribute to remove it from auditing or ‘drag and drop’ it into the Unmonitored Attribute list.
14
Once you have selected at least one attribute for auditing, the associated Monitored Attribute column in the list box displays the number of attributes selected for auditing. This value will also be displayed in the Monitored Attribute column back on the ADAM (AD LDS) Auditing page.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级