Windows Change Logging

[cpjitservices]

Hi all,

 

Might be a bit of a strange one, I'm looking for a program or a suite of software that will basically monitor changes made to a server system.

 

This has come up because of an issue we have had with a 3rd party altering their software on one of our servers, rendering the software to not work as it should - the response from the company is 'you have an environmental issue not caused by us'. Strange because this software has worked for the past 5 years with 0 issues. It's only when this change was done it now doesnt work.

 

So, I'm looking for software (pref open source/free) that will create a log (locally/off-site?) of any system changes made to programs/files/folders & directories. One of the problems with this software is access denied, so somewhere a permission / set of permissions has been changed (not by us) but no idea where. If we had some sort of log I could go and revert the changes.

 

Or anything I can enable within Windows?

 

Any Ideas?

 

Thanks in advance.

Edited November 22, 2017 by cpjitservices

[HPlum78]

If you have access to OMS that can do this sort of thing.

 

https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-change-tracking

[manc_techie]

I use Netwrix for this. Establishes a baseline for users and will alert if anything suspicious crops up.

[cpjitservices]

If you have access to OMS that can do this sort of thing.

 

https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-change-tracking

 

Dont think we do unfortunately.

 

- - - Updated - - -

 

I use Netwrix for this. Establishes a baseline for users and will alert if anything suspicious crops up.

 

How much did it cost?

 

I'll check the product out.

 

Ta.

[manc_techie]

I'm no longer in Education, it was around 32K over 3 years with maintenance for a mix of 220 Windows and Linux servers. Education pricing should be much lower, a cheaper product was offered by ManageEngine but this was not liked by our management team when demoed.