Announcement

Collapse
No announcement yet.

AD OU Security Change Audit

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • AD OU Security Change Audit

    Hi

    Is anyone aware of any scripts or free tools that can be run against an OU that will show either the time of when the security was amended on an OU or who might have done it.

    I suspect that someone has gone into an OU and changed the security on it but I can't prove it.

    Auditing is not switched on at that level.

    Many thanks

  • #2
    Re: AD OU Security Change Audit

    Without auditing, no chance -- enable it and be prepared to spend lots of time going through logs

    The MS "eventcombMT" tool takes out some of the work, and you could look at trials of e.g. GFI Events (or whatever it is called)
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment

    Working...
    X