+ Post New Thread
Results 1 to 9 of 9
How do you do....it? Thread, Track Active Directory Changes? in Technical; Hi, not sure if this is even possible but figured if anyone knows it'll be you guys! I'm wondering if ...
  1. #1
    Dom_'s Avatar
    Join Date
    Dec 2008
    Posts
    1,011
    Thank Post
    151
    Thanked 138 Times in 115 Posts
    Rep Power
    56

    Track Active Directory Changes?

    Hi, not sure if this is even possible but figured if anyone knows it'll be you guys!

    I'm wondering if there is any way to track changes made to active directory, such as password changes, account creation/deletion etc.

    Cheers,

    Dom

  2. #2

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,450
    Thank Post
    369
    Thanked 650 Times in 531 Posts
    Rep Power
    160
    Yer, it's called Event Viewer.

  3. #3
    ahuxham's Avatar
    Join Date
    Apr 2008
    Posts
    1,122
    Thank Post
    76
    Thanked 138 Times in 109 Posts
    Rep Power
    31
    Quote Originally Posted by matt40k View Post
    Yer, it's called Event Viewer.
    You have to enable AD tracking in Event Viewer.

  4. Thanks to ahuxham from:

    Dom_ (8th January 2009)

  5. #4

    Join Date
    Feb 2008
    Posts
    270
    Thank Post
    14
    Thanked 44 Times in 35 Posts
    Rep Power
    22
    or if you are rolling in cash have a look at this:

    Active Directory Audit: Quest ChangeAuditor for Active Directory


  6. #5

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,610
    Thank Post
    730
    Thanked 1,688 Times in 1,502 Posts
    Rep Power
    433
    Microsoft Advanced Group Policy Management for Windows Enterprise will give you control over the creation of group policy as well so that you don't end up pushing out bad configured objects.

    Ben

  7. #6
    Jasbo's Avatar
    Join Date
    Mar 2014
    Location
    West Sussex
    Posts
    152
    Thank Post
    12
    Thanked 20 Times in 20 Posts
    Rep Power
    5
    http://lp.netwrix.com/free_change_no...0170000000l245

    These people do a number of free. / paid products for tracking/change management.

    Not tried this one yet but I am working through their freebies.

  8. #7
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,161
    Thank Post
    710
    Thanked 172 Times in 156 Posts
    Blog Entries
    78
    Rep Power
    86
    Quote Originally Posted by plexer View Post
    Microsoft Advanced Group Policy Management for Windows Enterprise will give you control over the creation of group policy as well so that you don't end up pushing out bad configured objects.

    Ben
    Plus one for this, been using it for 3 years. Really helpful for change management and history

  9. #8


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,684
    Thank Post
    279
    Thanked 784 Times in 611 Posts
    Rep Power
    224
    Ossec parses the event logs and alerts us (though it's overkill if that's all you want).

    Decent-ish intro here: https://raymii.org/s/tutorials/OSSEC...on_Ubuntu.html

  10. #9

    Join Date
    Sep 2014
    Location
    France
    Posts
    2
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    This page describe how to track and monitor AD changes based on the security event. This solution uses the windows event forwarding, scheduled task triggered by event ID and offer an interface to organize them and find them quickly. The advantage is also to keep an history and it is free. Here : http://www.shellandco.net/audit-the-active-directory/

  11. Thanks to nicoh from:

    TheScarfedOne (5th September 2014)

SHARE:
+ Post New Thread

Similar Threads

  1. Active Directory
    By Neville in forum Windows
    Replies: 6
    Last Post: 25th June 2008, 03:24 PM
  2. Active Directory question
    By ClaireL in forum Windows
    Replies: 14
    Last Post: 19th May 2008, 12:38 PM
  3. Replies: 7
    Last Post: 31st January 2008, 12:17 PM
  4. Active Directory Explorer
    By ajbritton in forum Windows
    Replies: 6
    Last Post: 15th November 2007, 10:37 PM
  5. Terrastation and active directory
    By edie209 in forum Windows
    Replies: 8
    Last Post: 27th September 2007, 02:46 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •