Track Active Directory Changes?

[Dom_]

Hi, not sure if this is even possible but figured if anyone knows it'll be you guys!

 

I'm wondering if there is any way to track changes made to active directory, such as password changes, account creation/deletion etc.

 

Cheers,

 

Dom

[matt40k]

Yer, it's called Event Viewer.

[ahuxham]

Yer, it's called Event Viewer.

 

You have to enable AD tracking in Event Viewer.

[ssiruuk2]

or if you are rolling in cash have a look at this:

 

Active Directory Audit: Quest ChangeAuditor for Active Directory

 

[plexer]

Microsoft Advanced Group Policy Management for Windows Enterprise will give you control over the creation of group policy as well so that you don't end up pushing out bad configured objects.

 

Ben

[Jasbo]

http://lp.netwrix.com/free_change_notifier_for_active_directory.html?cID=70170000000l245

 

These people do a number of free. / paid products for tracking/change management.

 

Not tried this one yet but I am working through their freebies.

[TheScarfedOne]

Microsoft Advanced Group Policy Management for Windows Enterprise will give you control over the creation of group policy as well so that you don't end up pushing out bad configured objects.

 

Ben

 

Plus one for this, been using it for 3 years. Really helpful for change management and history

[pete]

Ossec parses the event logs and alerts us (though it's overkill if that's all you want).

 

Decent-ish intro here: https://raymii.org/s/tutorials/OSSEC_2.8.0_Server_Client_and_Analogi_Dashboard_on_Ubuntu.html