+ Post New Thread
Results 1 to 9 of 9
How do you do....it? Thread, Track Active Directory Changes? in Technical; Hi, not sure if this is even possible but figured if anyone knows it'll be you guys! I'm wondering if ...
  1. #1
    Dom_'s Avatar
    Join Date
    Dec 2008
    Posts
    1,010
    Thank Post
    151
    Thanked 138 Times in 115 Posts
    Rep Power
    56

    Track Active Directory Changes?

    Hi, not sure if this is even possible but figured if anyone knows it'll be you guys!

    I'm wondering if there is any way to track changes made to active directory, such as password changes, account creation/deletion etc.

    Cheers,

    Dom

  2. #2

    matt40k's Avatar
    Join Date
    Jun 2008
    Location
    Ipswich
    Posts
    4,433
    Thank Post
    368
    Thanked 646 Times in 528 Posts
    Rep Power
    159
    Yer, it's called Event Viewer.

  3. #3
    ahuxham's Avatar
    Join Date
    Apr 2008
    Posts
    1,122
    Thank Post
    76
    Thanked 138 Times in 109 Posts
    Rep Power
    31
    Quote Originally Posted by matt40k View Post
    Yer, it's called Event Viewer.
    You have to enable AD tracking in Event Viewer.

  4. Thanks to ahuxham from:

    Dom_ (8th January 2009)

  5. #4

    Join Date
    Feb 2008
    Posts
    270
    Thank Post
    14
    Thanked 44 Times in 35 Posts
    Rep Power
    22
    or if you are rolling in cash have a look at this:

    Active Directory Audit: Quest ChangeAuditor for Active Directory


  6. #5

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,707
    Thank Post
    665
    Thanked 1,636 Times in 1,462 Posts
    Rep Power
    424
    Microsoft Advanced Group Policy Management for Windows Enterprise will give you control over the creation of group policy as well so that you don't end up pushing out bad configured objects.

    Ben

  7. #6
    Jasbo's Avatar
    Join Date
    Mar 2014
    Location
    West Sussex
    Posts
    145
    Thank Post
    12
    Thanked 20 Times in 20 Posts
    Rep Power
    5
    http://lp.netwrix.com/free_change_no...0170000000l245

    These people do a number of free. / paid products for tracking/change management.

    Not tried this one yet but I am working through their freebies.

  8. #7
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,346
    Thank Post
    676
    Thanked 169 Times in 154 Posts
    Blog Entries
    78
    Rep Power
    85
    Quote Originally Posted by plexer View Post
    Microsoft Advanced Group Policy Management for Windows Enterprise will give you control over the creation of group policy as well so that you don't end up pushing out bad configured objects.

    Ben
    Plus one for this, been using it for 3 years. Really helpful for change management and history

  9. #8


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,650
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224
    Ossec parses the event logs and alerts us (though it's overkill if that's all you want).

    Decent-ish intro here: https://raymii.org/s/tutorials/OSSEC...on_Ubuntu.html

  10. #9

    Join Date
    Sep 2014
    Location
    France
    Posts
    1
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0
    This page describe how to track and monitor AD changes based on the security event. This solution uses the windows event forwarding, scheduled task triggered by event ID and offer an interface to organize them and find them quickly. The advantage is also to keep an history and it is free. Here : http://www.shellandco.net/audit-the-active-directory/

  11. Thanks to nicoh from:

    TheScarfedOne (5th September 2014)

SHARE:
+ Post New Thread

Similar Threads

  1. Active Directory
    By Neville in forum Windows
    Replies: 6
    Last Post: 25th June 2008, 03:24 PM
  2. Active Directory question
    By ClaireL in forum Windows
    Replies: 14
    Last Post: 19th May 2008, 12:38 PM
  3. Replies: 7
    Last Post: 31st January 2008, 12:17 PM
  4. Active Directory Explorer
    By ajbritton in forum Windows
    Replies: 6
    Last Post: 15th November 2007, 10:37 PM
  5. Terrastation and active directory
    By edie209 in forum Windows
    Replies: 8
    Last Post: 27th September 2007, 02:46 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •