Change Auditor 7.3 - User Guide


	NOTE: If Active Directory integrated DNS is deployed, you can access the ForestDNSZones or DomainDNSZones partitions by right-clicking on the top-level domain object.

•

Search - use the Search page to search your environment to locate and select a directory object


	NOTE: Disabled objects on these two pages are represented by a red X icon.

•

Options - use the Options page to view or modify search options used to retrieve directory objects

Browsing for a directory object

To browse for a directory object:

Open the Browse page.

In the Forest field, select the forest that contains the required directory objects.

NOTE: The Forest field is available in directory object picker in the following areas:

•

Group membership expansion, SMTP configuration and shared folder configuration

•

Purge and archive jobs

•

Active Directory, AD Query, ADAM (AD LDS), Exchange, Group Policy, Local accounts, Registry, Service, and SQL Server searches

•

Report and alert email configuration

•

Windows File System and AD Query auditing wizard

•

Active Directory auditing and protection wizard

•

File System protection wizard

In the Find field, either enter or use the drop-down menu to select the type of directory object.

You can enter multiple classes, separated by either a comma or semi-colon. Note that when you type in an entry, you must use the Enter key or the Apply Filter button to display the objects.


	NOTE: Most of the time, this field will be automatically filled in with the appropriate entry. Thus, when this field is grayed out, this is a read-only field which cannot be changed.

In the explorer view (left pane), single-click on the expansion state box to the left of a container or double-click a container to expand the view to display subordinate objects.

Select a container in this pane to populate the object list (right pane) with the objects that belong to the selected container.


	NOTE: Right-clicking the root domain in the explorer view displays a drop-down menu listing any peer domains. To view a different domain’s objects, select the desired domain from those listed.

Use the F5 button to force a refresh of the contents of this pane.

In the object list, click the object to select it and use the Add button to add it to the Selected Objects list at the bottom of the dialog.


	NOTE: The Selected Objects list is used for both the Browse and Search pages and will contain the objects selected from either of these pages.

Once you have added objects to this list, use the Select button to save your selection and close the dialog. Or if the directory object picker is part of a wizard, click Next to save your selection and continue.

Searching for a directory object

To search your environment for a directory object:

Open the Search page and use the controls at the top of the page to search your environment to locate the desired objects.

In the Find field, either enter or use the drop-down menu to select the type of directory object to be located.

You can enter multiple classes, separated by either a comma or semi-colon. Note that when you type in an entry, either click the Enter key or use the Search button to display the objects.

In the Name field, specify a search expression to be used to search Active Directory to locate a particular object. In most cases, this field will contain an asterisk (*) indicating to search for all objects of the type specified in the Find field.


	NOTE: Most of the time, this field will be automatically filled in with the appropriate entry. Thus, when this field is grayed out, this is a read-only field which cannot be changed.

Select the ANR check box to use Ambiguous Name Resolution (ANR) as the search algorithm, which allows you to enter limited input (partial data) to find multiple objects in your network.

When the ANR check box is checked, use one of the following methods to enter your search expression:

•

Enter a partial string to return exact matches or a list of possible matches. For example, entering ‘Admin’ will return objects that contain the names ‘Admin’, ‘Admins’, ‘Administrator’, Administrators’, etc.

•

Enter a string preceded by the equal sign (=Admins) to return only exact matches. For example, entering ‘=Admin’ will return only those objects containing the name ‘Admin’.

By default, ANR will search the following attribute fields in Active Directory:

•

First Name (GivenName)

•

Last Name (Surname)

•

Display Name (displayName)

•

LegacyExchangeDN

•

msExchMailNickname

•

Relative Discontinued Name of the object (RDN)

•

Office (physicalDeliveryOfficeName)

•

Email address (proxyAddress)

•

Security Account Manager account (sAMAccountName)

When the ANR check box is not checked, the search expression entered will be used to search only the Display Name of directory objects to locate a particular object.

To use this search mechanism, enter a string of characters and the wildcard (*) character as described below.

•

n* will return objects that start with the letter ‘n’

•

*n will return objects that end in the letter ‘n’

•

*n* will return objects that contain the letter ‘n’ within their Display Name.

After entering a search expression, use the Search button to initiate the search and return the results of the search.

The object list displays the objects found as a result of your search. To select an object, click on the object to highlight it and use the Add button to add it to the Selected Objects list.


	NOTE: The Selected Objects list is used for both the Browse and Search pages and will contain the objects selected from either of these pages.

To view or modify the search options to use to retrieve directory objects:

Open the Options page and modify the options as required.


	NOTE: The settings on the Options page only apply to the current user and do not impact other users using a Change Auditor client.

The Search Limit field specifies the maximum number of records to return for an Active Directory object search. The default is 2000 records.

To change this limit, enter a value between 100 and 9999.

Or to allow an unlimited number of records to be returned, select the No Search Limit check box.

The Page Size field displays the maximum number of records to return per LDAP polling cycle.


	TIP: Care should be taken when modifying this value, because it could impact the performance of your searches.

Once you have made changes on the Options page, use the Select button to save your selection and close the dialog. If the directory object picker is part of a wizard, click Next to save your selection and continue.