Announcement

Collapse
No announcement yet.

How to track changes made to a LDAP Account

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • How to track changes made to a LDAP Account

    Hi, is there a way to track/monitor a change made to a LDAP account. I wanted to verify how a certain user was removed for a group membership. Thank you. BR.

  • #2
    Re: How to track changes made to a LDAP Account

    Check with this

    Method : The DirSync control
    The DirSync control is a Lightweight Directory Access Protocol (LDAP) server extension that enables a program to search an Active Directory partition for objects that have changed. When a program performs a DirSync search, the program creates a cookie that identifies the directory state at the time of an earlier DirSync query. With the first search, the program creates an empty cookie and Active Directory returns all objects that satisfy the query. Active Directory also returns an updated cookie that can be passed to the next search to obtain changes that are made since the first search. This process is repeated for each search.

    http://support.microsoft.com/kb/891995

    Comment


    • #3
      Re: How to track changes made to a LDAP Account

      Look into the auditing policies: http://support.microsoft.com/kb/814595
      Caesar's cipher - 3

      ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

      SFX JNRS FC U6 MNGR

      Comment

      Working...
      X