The protection task list is divided into the following separate task lists:
• |
• |
NOTE: For more information, including recommendations and full descriptions of the following protection pages, see the Quest Change Auditor for Active Directory User Guide. |
See the following administration task descriptions for more information:
When configured, Change Auditor prevents changes from occurring to a protected object regardless of who attempts to change the object and the tool or method used. Attempts to change or delete a protected object fail and an event is generated. These ‘failed’ events are identified by displaying ‘Protected’ in the Result column on the Search Results page and Result field in an event’s detail pane.
NOTE: See the Quest Change Auditor User Guide for information about defining the events to capture based on result. |
The Active Directory Protection page is displayed when Active Directory is selected from the Protection task list in the navigation pane of the Administration Tasks page, and contains an expandable view of all the Active Directory Protection templates that have been previously defined. From this page, you can open the Active Directory Protection wizard to define critical Active Directory objects to protect from unauthorized modifications. You can also edit existing templates, disable and enable templates, and remove templates that are no longer required.
NOTE: If you are planning to use multiple Active Directory Protection templates, see the Quest Change Auditor Technical Insight Guide for more information about how multiple protection templates are evaluated. |
2 |
Click Protection. |
3 |
Select Active Directory in the Protection task list to open the Active Directory Protection page. |
4 |
Click Add to open the Active Directory Protection wizard which allows you to specify the Active Directory objects to be protected. |
The ADAM (AD LDS) Protection page is displayed when ADAM (AD LDS) is selected from the Protection task list in the navigation pane of the Administration Tasks page, and contains an expandable view of all the ADAM (AD LDS) Protection templates that have been previously defined. From this page, you can open the ADAM (AD LDS) Protection wizard to define critical objects to protect from unauthorized modifications. You can also edit existing templates, disable and enable templates, and remove templates that are no longer required.
NOTE: If you are planning to use multiple ADAM (AD LDS) Protection templates, see the Quest Change Auditor Technical Insight Guide for more information about how multiple protection templates are evaluated. |
2 |
Click Protection. |
3 |
Select ADAM (AD LDS) in the Protection task list to open the ADAM (AD LDS) Protection page. |
4 |
Click Add to open the ADAM (AD LDS) Protection wizard which allows you to specify the objects to be protected. |
Select the ADAM (AD LDS) instance from which to choose protected objects. |
| |||||||
| ||||||||
Use the Browse or Search page to locate and select the objects to protect. See Directory object picker for a detailed description of this wizard page. |
| |||||||
(Optional) Specify the attributes to include and exclude. By default, all attributes for the selected objects are protected. |
| |||||||
(Optional) Specify the accounts that are allowed to change the protected objects. By default, all users and groups are prevented from changing the objects selected for protection. |
|
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center