• Quest powershell to get disabled users list for last week

    Hi,

    Probably not difficult to get disabled or deprovisioned users but i need to have report of list of deprovisioned users with the initiator of deprovision. also if we can apply filter to get specific period report only. 

    Thanks and much appreciate for…

  • Possible Agent issue with DC - Microsoft-Windows-Security-Kerberos

    Hello, I am working with PSO to deploy Change Auditor in production. I stood up a lab to test how some agents would interact. The agents of concern are ManageEngine PasswordSyncAgent and the Quest Change Auditor Agent.

    We couldn't find a smoking gun in…

  • Disable event auditing

    Hi,

    I am just interested to know if there is any performance advantage or any other advantages when I DISABLE events for which I have no License Type.

    I an running CA for Active Directory. When I look at all of the different Facility Names and their respective…

  • Search for when AD Computer Objects are moved to Computers OU

    I am looking to create a search that audits when any computer object is moved in or out of the default 'Computers' OU.

    I see there is a 'Computer moved' event class that I might be able to use. However, Im not sure what I would put in the 'Where…

  • Delegation with Change Auditor

    Hey All,

    I was wondering if there would be a way to restrict the access of admin users within Change Auditor so they can just search for events which occurred on Objects within one OU?

  • The DACL was changed on the group CN=Schema Admins . . .

    Hi,

    Environment:

    Change Auditor 6.9.1 / Build 3131

    Change Auditor Active Directory

    Domain function level: Windows 2012R2

    I see the following events in Change Auditor:

    The DACL was changed for the group object CN=Schema Admins . .

    The event states is…

  • The DACL was changed for the group object CN=Schema Admins . . .

    Hi,

    Environment:

    Change Auditor 6.9.1 / Build 3131

    Change Auditor Active Directory

    Domain function level: Windows 2012R2

    I see the following events in Change Auditor:

    The DACL was changed for the group object CN=Schema Admins . .

    The event states is…

  • Agent status "Never" on servers with same name, new fresh installation

    Hi guys!

    Thank you very much for your help.

    Happens with a customer that we have 27 agents installed (FS, DC, SQL etc)

    They install new DC (three servers) keeping the name and the IP address of the "previous" servers that were installed and auditing,…

  • Change Auditor alert for larger number of AD groups

    Hello,

    We have recently brought in Quest Change Auditor (6.9.4 Build 9177) to help us with Active Directory.

    Our first directive is to use the tool to monitor up to 1,200 AD groups for membership changes.  When membership changes are detected, send an…

  • Top 20 Users Account Lockout Report

    Can we generate a report of Top 20 Users whose accounts have got locked in a week. 

  • Video: Active Directory is the heart of your business. That’s why the bad guys want to break it.

    This video is a high level overview of how Change Auditor can protect your Active Directory environment from hackers, external threats and disgruntled employees.

     

  • Latest Version - Change Auditor 6.8

    The current version of Change Auditor is 6.8

    Trial Downloads:

    Current customer, download…