I have an AD server running on server 2003. Can i check how do i audit other domain administrators on using creating/update/delete new users, computers and group policies ?
Thanks :)
I have an AD server running on server 2003. Can i check how do i audit other domain administrators on using creating/update/delete new users, computers and group policies ?
Thanks :)
It is possible but the process it bit complicated. You will need to first add the admin accounts under the audit policies and then number of domain also. You might need to create a centralized system which can offer you all this service in single time. Try to go through the below link. It might offer you more detailed info on the same.
AD DS Auditing Step-by-Step Guide
I use NetWrix Active Directory Change Reporter for this—It audits, alerts and reports on all changes made to AD, with info on who made what change, when. Quest and NetIQ also offer good tools that will help you with this
You can try this LepideAuditor for Active Directory which helps to monitor all critical changes in Active Directory environment and collect the complete audit data providing Who, When, Where and what information for all changes made to all domains.
Bookmarks