Announcement

Collapse
No announcement yet.

Monitoring Changes to Users and Groups

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Monitoring Changes to Users and Groups

    What are people doing to monitor changes to user and group memberships in AD? Like if a user is removed from a group, how do you know for auditing purposes? Can this be done natively within windows or requires a third part software tool?

  • #2
    Re: Monitoring Changes to Users and Groups

    You can audit changes to AD in Server 2008:
    http://technet.microsoft.com/en-us/l...(v=ws.10).aspx
    This keeps a record of "before" and "after" values
    Specifics for group membership auditing:
    http://www.shariqsheikh.com/blog/ind...rship-changes/

    Note 3rd party tools may offer a more efficient way of doing this.
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment

    Working...
    X