Searches are working good and some admins have alerts configured to send live updates as changes are being made. We have a new business process that is resetting group membership for a specific group on a regular basis. When that happens, it removes all…
We use quick searches to review specific events. Often, we would like to see the same type of quick search for multiple objects. Can we connect the underlying database to leverage Power BI to present the data?
We use quick searches to review specific events. Often, we would like to see the same type of quick search for multiple objects. Has anyone been able to leverage Powershell to query instead of performing a Quick Search?
Hi Experts,
What cleanup activities can be performed on decommissioned DCs as well in CAAD portal in perspective of Change Auditor for Active Directory?
I have a scenario where I need to see when a user was added to a certain group. I can't for the life of me figure out how to show only the user and the group member being added. I can see all the events of either the user, or the group, but not ONLY when…
Often we need to temporarily modify searches to run a focused query. I notice there is an option to save, but we intentionally do not click that, however it seems any time the search runs, it automatically saves. Is this expected? Is there a way to prevent…
I am completely new to Change Auditor so please bear with me.
A user is reporting that an email they used to receive from Change Auditor is no longer being received. The email reports when membership to an AD security group is modified. I am an admin…
I am new to Quest Change Auditor. I have two templates, Template1 and Template2. In Template1, I have 100 AD groups protected, and in Template2, I have 300 AD groups protected. I want to export all the AD groups protected by Template1 and Template2 to…
If a user is using Quest Change Auditor for Active Directory across two different domains or multiple domains, how many licenses will be consumed by the user?
Hi Experts,
During the installation of the first Coordinator, I faced an issue in the wizard where we needed to provide the SQL server information, clicking on Next provides the error "The Database server could not be located". Can you please help me…
Hi Experts,
Can we install the Change Auditor Coordinator and Client on the same server in the test environment? Also, Can you specify the system and software configuration requirements as well as user account permissions? In Addition, is there a retention…
Hello Experts,
We have an old environment where change auditor for active directories was installed and managed. Going to create new environment where policies need to new environment. how to migrate the old policies to new domain environment.
What would…
Dear Support Team,
Would you describe the Time synchronization process between Change Auditor Coordinator, Agents, and domain servers?
In case there is Light Saving time change happens
Hi
I have a forest with 2 DCs and both DCs have the agent installed. The agents are active and i can see in the overview some events from subsystem Change Auditor, service and active directory but when i am disabling/enabling an account for example the…
Hi,
I've receive a request to send the Change Auditor events to a syslog collector... But for planning purposes they are wondering the ingestion rate (EPS / Volume Size) for the CA events. Is there a way I could generate a reports with the information…
Hi all,
I need help to configure Syslog with TLS encryption,
I configured Syslog on the coordinator to send alerts to our SIEM system which is based on Elastic stack, I followed "Managing Syslog integration" section in "SIEM integration user guide", I…
Change Auditor for Active Directory 7.1.1
I recently implemented Protection on several GPOs. I only allow Domain Admins and Group Policy Creator Owners excluded from Protection.
When I run the query 'All Group policy Events', I have hundreds of entries…
Hello ,
Need Help Please,
Does anyone know how to audit attribute
I'd like to find out who created an existing alert and when it was created?
is there a log or audit feature?
Hello, I am working with PSO to deploy Change Auditor in production. I stood up a lab to test how some agents would interact. The agents of concern are ManageEngine PasswordSyncAgent and the Quest Change Auditor Agent.
We couldn't find a smoking gun in…
Hi All
I am new to this product we are using Quest Change Auditor Version 7.1/Build 16043. one of my AD group is protected and one of the user gets email notification when ever any user is added or removed from the group. Suddenly user is not receiving…
I observed that Change Auditor agent on Domain Controller doesn't pass ADEvents to Change Coordinator server even though the Agent service is running on the Domain Controller and it's passing other events too, It shows ADEevents zero on ServiceStatusTray…
Hi,
I am just interested to know if there is any performance advantage or any other advantages when I DISABLE events for which I have no License Type.
I an running CA for Active Directory. When I look at all of the different Facility Names and their respective…
I cannot determine the exact criteria to find all Custom User Monitoring Events and Customer AD Object Monitoring Events for one user.
I can create the search for the events in the Facility but I can't figure out how to select one user (not the user that…
Is there a matrix or list published somewhere that lists the Operations associated with the built-in 'Operator' and 'Web Client Shared Overviews' Tasks?
