• Failure Type : Unknown error occurred

    Hi Quest,

    Change Auditor: 6.9.3

    Change Auditor for Active directory

    I have been noticing quite a few Failure notices in Change Auditor. A special service account is trying to move a group from one OU to another OU. I have checked the security permissions…

  • Programmatically Retrieve Search Results

    Howdy.   Curious if Change Auditor has a mechanism to programmatically retrieve search results.   The PowerShell module seems more for management of Change Auditor and I've not found any information on a REST or SOAP interface.   Wondering if this functionality…

  • Display username variable in email subject line

    We recently migrated from InTrust to CA.

    We had a Real Time Alert to send an email if a user account gets locked out. In InTrust we could send all the relevant information in just the subject line, with the body providing further details.

    After migrating…

  • Love Change Auditor as much as us?! Well then VOTE for Change Auditor for the People's Choice Award!

    Voting is underway for the 2018 People's Choice Stevie® Awards and this is a shameless plug to drum up support for some of Quest products, specifically Change Auditor, that we’ve been pouring our blood, sweat and tears into for the past year. Since…

  • how to detect the enforced gpo

    We are not able to find out how to detect the enforced GPO.  Is there a way to audit it?

  • Agent status "Never" on servers with same name, new fresh installation

    Hi guys!

    Thank you very much for your help.

    Happens with a customer that we have 27 agents installed (FS, DC, SQL etc)

    They install new DC (three servers) keeping the name and the IP address of the "previous" servers that were installed and auditing,…

  • Auditing Shadow Copy Activity - Creation not logged

    Hello,


    I use Change Auditor v6.9.2.


    Regarding common attacks on Active Directory(AD), I would like to know when a Shadow Copy(SC) is created/deleted on my Domain Controller(DC).
    A backup, exploiting SC, is realize every days on my DC so I can check results…

  • Audit All Drives

    Hi,

    Does anyone how I would audit the c:\ and D:\ drives on a server?

    Thanks

    Jamie

  • Removing Change Auditor Report Timestamp

    Hello!  We recently upgraded to 6.9.5.10608.  However, we've noticed that our reports that we have sent to a mailbox now include a timestamp in the filename instead of just the name of the report.  For most reports, it is not an issue, but some teams…

  • What would prevent Change Auditor from reporting lockout events?

    What would prevent Change Auditor from reporting lockout events?  It reports User Account Unlocked, but not User Account Locked.  They used to get reported and then they just sopped one day.  It stopped reporting lockouts 8/22/2017, but I don't recall any…

  • Auditing VM's

    Hi,

    We would like to audit our VM's to monitor if files have been saved locally for security purposes. Is this possible?

    We are currently running Change Auditor 6.9.3 / Build 7322

    Any help with this would be much appreciated.

    Regards

    Jamie

     

     

  • How do I alert when a Protection template is Disabled?

    We have enabled Group Protection Templates using Change Auditor at my company. How do I alert if this template is Disabled/Enabled?

     

    Thanks,

     

    Steve

  • Change Auditor Data level Auditing stops working

    Hello,

    I have Data level auditing turned on, initially it did record record level changes.. however, suddenly it stopped. I looked on the Knowledge Base and ensured that all the articles related were either verified or addressed. not sure what left to…

  • Change Auditor Coordinator and IT Security Search on same server.

    Hi Guys.

    We are using change auditor (for AD) in several domains and would like to try out IT Security Search now. I wonder if I do have to set up a new server dedicated to ISS or if it is possible to combine ISS with a server that has a coordinator on…

  • Custom Search for Member of Group

    We recently had a need to find who removed a user from a group.  Under Security, User Management, there is a report for Users removed from group in the last 30 days.  However, the "who" in this report is the person who made the change - not the member of…

  • ANNOUNCMENT: We are now on Twitter!!! Contact a Technical Support expert today.

    Do you have a quick support question and short of time ? Contact us Via Twitter  @QuestExperts and we will take care of you. #Jointheinnovation #WeareQuest

  • FRS -> DFSR migraiton and alerts in Change Auditor

    I am migrating FRS to DFSR and going from 'REDIRECTED' to 'ELIMINATED'.

    During this phase the FRS service is stopped and Disabled.

    I receive an alert in Change Auditor on Windows 2008 R2 DCs, but not on Windows 2012 R2 DCs. On a 2012 R2…

  • Top 5 Knowledge Base Articles:

  • Video: Track, audit, alert and report on changes to Windows File Servers with Change Auditor

    2 minute video showing an overview of Change Auditor for Windows File Server

     

  • Video: Active Directory is the heart of your business. That’s why the bad guys want to break it.

    This video is a high level overview of how Change Auditor can protect your Active Directory environment from hackers, external threats and disgruntled employees.

     

  • Latest Version - Change Auditor 6.8

    The current version of Change Auditor is 6.8

    Trial Downloads:

    Current customer, download…

  • Welcome to the Change Auditor Forum

    You're at the new Change Auditor Community Forum! Got a question or a thought to share with others? Post it here! And if you have a question on the old site that we haven't answered, post it again here. We’re working on bringing threads over from our…