List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Auditing DA activity

Prev Next

You are not authorized to post a reply.

Author

Messages

bijubabuk

Posts:153

07/19/2012 10:10 AM
Hello all, For some reason the number of Domain Admins in my org is increasing.. so wondering do others audit the activities of DA's like what command a DA account executed etc. I have the standard DS auditing enabled so it will give me the necessary details like who modified an object and when etc.. apart from the standard logging is there anything else I should be considering ? Rgds My working hours are from 11:00 to 19:30 IST (00:30 to 09:00 CST)

bijubabuk

Posts:153

07/22/2012 5:10 PM
True.. Thanx for the feedback.. My working hours are from 11:00 to 19:30 IST (00:30 to 09:00 CST) -----Original Message----- From: activedir-owner@xxxxxxxxxxxxxxxx [mailto:activedir-owner@xxxxxxxxxxxxxxxx] On Behalf Of rmscheck08@xxxxxxxxxxxxxxxx Sent: Saturday, July 21, 2012 6:41 AM To: activedir@xxxxxxxxxxxxxxxx Subject: Re: [ActiveDir] Auditing DA activity I think if your place is big enough, either you go with event log forwarding so you can parse thru the mess, or get a 3rd party solution designed to help track change like that.. aka Quest Change Auditor, NetIQ Change Guardian... Blackbird AD something.... The built in DS auditing can be very cumbersome if you have an environment of a decent size... Now you could probably hack job some scripted action to cull the logs and plop it somewhere.. but who's got time for that? On Thu, Jul 19, 2012 at 4:09 AM, <Biju_babu@xxxxxxxxxxxxxxxx> wrote: > Hello all, > > > > For some reason the number of Domain Admins in my org is increasing.. > so wondering do others audit the activities of DA's like what command > a DA account executed etc. > > > > I have the standard DS auditing enabled so it will give me the > necessary details like who modified an object and when etc.. apart > from the standard logging is there anything else I should be considering ? > > > > Rgds > > > > > > > > My working hours are from 11:00 to 19:30 IST (00:30 to 09:00 CST) > > List info: http://www.activedir.org/List.aspx List info: http://www.activedir.org/List.aspx

pbbergs

Posts:337

07/23/2012 6:55 PM
SCOM will do it as well Thank You Paul Bergson Lead Systems Engineer Tax/Science - Cust Thomson Reuters -----Original Message----- From: activedir-owner@xxxxxxxxxxxxxxxx [mailto:activedir-owner@xxxxxxxxxxxxxxxx] On Behalf Of Rand Salazar Sent: Friday, July 20, 2012 8:11 PM To: activedir@xxxxxxxxxxxxxxxx Subject: Re: [ActiveDir] Auditing DA activity I think if your place is big enough, either you go with event log forwarding so you can parse thru the mess, or get a 3rd party solution designed to help track change like that.. aka Quest Change Auditor, NetIQ Change Guardian... Blackbird AD something.... The built in DS auditing can be very cumbersome if you have an environment of a decent size... Now you could probably hack job some scripted action to cull the logs and plop it somewhere.. but who's got time for that? On Thu, Jul 19, 2012 at 4:09 AM, <Biju_babu@xxxxxxxxxxxxxxxx> wrote: > Hello all, > > > > For some reason the number of Domain Admins in my org is increasing.. > so wondering do others audit the activities of DA's like what command > a DA account executed etc. > > > > I have the standard DS auditing enabled so it will give me the > necessary details like who modified an object and when etc.. apart > from the standard logging is there anything else I should be considering ? > > > > Rgds > > > > > > > > My working hours are from 11:00 to 19:30 IST (00:30 to 09:00 CST) > > List info: http://www.activedir.org/List.aspx

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Auditing DA activity

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads