→ Celebrate SysAdmin Day 2024 with Lansweeper Enter our Giveaway here

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Engaged Sweeper
I have just tested LanSweeper and it looks extremely promising. One important thing I need to find out is whether or not you can get reports/alerts on Active Directory modifications. What I mean by this is, if someone creates a new user either in the active directory or locally on a server, is there a way we can monitor that? This is so we can ensure complete control over user creation, permissions abuse or locally created users on servers or workstations.
Lansweeper Employee
Lansweeper Employee
Adjustments made in Active Directory are not stored in the Lansweeper database at this moment, which makes it impossible to report on it by using an SQL report.

You can however, setup an audit security policy setting on your server that generates audit events when changes are made to objects in Active Directory Domain Services. Setting up such policy to Audit Directory Service Changes will create events in the Event Viewer which you can report on by setting up an Event Log Alert as explained in this KB article, in the section.

Some additional information on the Advanced Security Audit policy setting, Audit Directory Service Changes can be found in this and this MS article. Information on how to scan these events with Lansweeper can be found in this KB article.