Forum active directory

State Suggested Answer
Replies 6 replies
Answers 5 answers
Subscribers 21 subscribers
Views 3787 views
Users 0 members are here

Options

Related

active directory

sadfhrytuerefgdghew over 2 years ago

has anyone tried before to Audit AD LAPS by Change Auditor ? is its possible ? and if yes , how ?

I need to Audit below LAPS Events :

Users who have viewed passwords.
Users who have modified a password's expiration time and date.

Thanks

Parents

0 darren hanlon over 2 years ago

Hello,

Change Auditor is capable of capturing when changes are made to the ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExperationTime attributes. Change Auditor is not capable of reporting when a attribute is only viewed as no change has occurred.

To monitor the ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExperationTime attributes for changes, you need to first add them to the list of Monitored attributes. Please see the following KB for instructions on how to add additional attributes:

https://support.quest.com/change-auditor/kb/64270/how-to-add-unmonitored-object-attribute-64270

Thank you,

Darren
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Reply

0 darren hanlon over 2 years ago

Hello,

Change Auditor is capable of capturing when changes are made to the ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExperationTime attributes. Change Auditor is not capable of reporting when a attribute is only viewed as no change has occurred.

To monitor the ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExperationTime attributes for changes, you need to first add them to the list of Monitored attributes. Please see the following KB for instructions on how to add additional attributes:

https://support.quest.com/change-auditor/kb/64270/how-to-add-unmonitored-object-attribute-64270

Thank you,

Darren
Cancel
Up 0 Down

Reply

Verify Answer

Cancel

Children

No Data