
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-01-2016 04:41 PM
Hello,
I have just tested LanSweeper and it looks extremely promising. One important thing I need to find out is whether or not you can get reports/alerts on Active Directory modifications. What I mean by this is, if someone creates a new user either in the active directory or locally on a server, is there a way we can monitor that? This is so we can ensure complete control over user creation, permissions abuse or locally created users on servers or workstations.
Thanks,
Brandon
I have just tested LanSweeper and it looks extremely promising. One important thing I need to find out is whether or not you can get reports/alerts on Active Directory modifications. What I mean by this is, if someone creates a new user either in the active directory or locally on a server, is there a way we can monitor that? This is so we can ensure complete control over user creation, permissions abuse or locally created users on servers or workstations.
Thanks,
Brandon
Labels:
- Labels:
-
General Discussion
1 REPLY 1

Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎07-04-2016 03:38 PM
Adjustments made in Active Directory are not stored in the Lansweeper database at this moment, which makes it impossible to report on it by using an SQL report.
You can however, setup an audit security policy setting on your server that generates audit events when changes are made to objects in Active Directory Domain Services. Setting up such policy to Audit Directory Service Changes will create events in the Event Viewer which you can report on by setting up an Event Log Alert as explained in this KB article, in the section.
Some additional information on the Advanced Security Audit policy setting, Audit Directory Service Changes can be found in this and this MS article. Information on how to scan these events with Lansweeper can be found in this KB article.
You can however, setup an audit security policy setting on your server that generates audit events when changes are made to objects in Active Directory Domain Services. Setting up such policy to Audit Directory Service Changes will create events in the Event Viewer which you can report on by setting up an Event Log Alert as explained in this KB article, in the section.
Some additional information on the Advanced Security Audit policy setting, Audit Directory Service Changes can be found in this and this MS article. Information on how to scan these events with Lansweeper can be found in this KB article.
