Did you know that RMAD reports can also contain information about "who modified"?

RMAD reports give us information about changed objects, but "Modified by" column is empty by default.

Of course, we can check Windows event log and find the required information, but it seems handy to have this information right in the report.

RMAD itself doesn't process information about AD changes, but there is another Quest product which can help us here. Going through recovery process with Online Recovery Wizard, we can select "Include ChangeAudithor data in reports" option.

And if you have access to Change Auditor Database, the report would show "who modified" column like it looks on the screenshot below.

Related Content