• First Coordinator installation SQL

    Hi Experts,

    During the installation of the first Coordinator,  I faced an issue in the wizard where we needed to provide the SQL server information, clicking on Next provides the error "The Database server could not be located". Can you please help me…

  • is it possible to find out who created an alert and when?

    I'd like to find out who created an existing alert and when it was created?

    is there a log or audit feature?

  • Possible Agent issue with DC - Microsoft-Windows-Security-Kerberos

    Hello, I am working with PSO to deploy Change Auditor in production. I stood up a lab to test how some agents would interact. The agents of concern are ManageEngine PasswordSyncAgent and the Quest Change Auditor Agent.

    We couldn't find a smoking gun in…

  • Email notification stopped

    Hi  All

    I am new to this product we are using Quest Change Auditor Version 7.1/Build 16043. one of my AD group is protected and one of the user gets email notification when ever any user is added or removed from the group. Suddenly user is not receiving…

  • Need to understand the behavior of ADHooks property value from WMI class "Win32_PerfFormattedData_CAAD_ChangeAuditorforActiveDirectory"

    I observed that Change Auditor agent on Domain Controller doesn't pass ADEvents to Change Coordinator server even though the Agent service is running on the Domain Controller and it's passing other events too, It shows ADEevents zero on ServiceStatusTray…

  • Change Auditor Application User Interface Roles, Tasks and Operations matrix

    Is there a matrix or list published somewhere that lists the Operations associated with the built-in 'Operator' and 'Web Client Shared Overviews' Tasks?

  • Audit Active Directory LAPS by Change Auditor

    Hello , 

    has anyone tried before to Audit AD LAPS by Change Auditor ? is its possible ? and if yes , how ? 

    I need to Audit below LAPS Events :

    • Users who have viewed passwords.
    • Users who have modified a password's expiration time and date. 

    Thanks 

  • Can I create a scoped GPO Search?

    I would like to alert on all Group Policy Object  and Group Policy Instance Facility events, but only related to GPO's linked to the domain root and one additional OU.

    Is there a way to scope a search/alert for this?

    Thanks

  • Protection Template Management rights required for CA Client

    From what I can see, you need to be in the Change Auditor Admins group to manage a protection template via the Change Auditor Client. Is there any way in v6.9.5 or above to have Protection template management be more granular?

  • Granularity with GPO object monitoring

    Hello,

    Is it possible to create a search where i can see all the changes for a specific set of GPOs based on name of GPO?

    For example, can I create a wildcard search that in effect says 'let me know any time something changes with all GPOs where name…

  • Search for when AD Computer Objects are moved to Computers OU

    I am looking to create a search that audits when any computer object is moved in or out of the default 'Computers' OU.

    I see there is a 'Computer moved' event class that I might be able to use. However, Im not sure what I would put in the 'Where…

  • The DACL was changed on the group CN=Schema Admins . . .

    Hi,

    Environment:

    Change Auditor 6.9.1 / Build 3131

    Change Auditor Active Directory

    Domain function level: Windows 2012R2

    I see the following events in Change Auditor:

    The DACL was changed for the group object CN=Schema Admins . .

    The event states is…

  • The DACL was changed for the group object CN=Schema Admins . . .

    Hi,

    Environment:

    Change Auditor 6.9.1 / Build 3131

    Change Auditor Active Directory

    Domain function level: Windows 2012R2

    I see the following events in Change Auditor:

    The DACL was changed for the group object CN=Schema Admins . .

    The event states is…

  • Failure Type : Unknown error occurred

    Hi Quest,

    Change Auditor: 6.9.3

    Change Auditor for Active directory

    I have been noticing quite a few Failure notices in Change Auditor. A special service account is trying to move a group from one OU to another OU. I have checked the security permissions…

  • Display username variable in email subject line

    We recently migrated from InTrust to CA.

    We had a Real Time Alert to send an email if a user account gets locked out. In InTrust we could send all the relevant information in just the subject line, with the body providing further details.

    After migrating…

  • Agent status "Never" on servers with same name, new fresh installation

    Hi guys!

    Thank you very much for your help.

    Happens with a customer that we have 27 agents installed (FS, DC, SQL etc)

    They install new DC (three servers) keeping the name and the IP address of the "previous" servers that were installed and auditing,…

  • How do I alert when a Protection template is Disabled?

    We have enabled Group Protection Templates using Change Auditor at my company. How do I alert if this template is Disabled/Enabled?

     

    Thanks,

     

    Steve

  • Custom Search for Member of Group

    We recently had a need to find who removed a user from a group.  Under Security, User Management, there is a report for Users removed from group in the last 30 days.  However, the "who" in this report is the person who made the change - not the member of…

  • ANNOUNCMENT: We are now on Twitter!!! Contact a Technical Support expert today.

    Do you have a quick support question and short of time ? Contact us Via Twitter  @QuestExperts and we will take care of you. #Jointheinnovation #WeareQuest

  • FRS -> DFSR migraiton and alerts in Change Auditor

    I am migrating FRS to DFSR and going from 'REDIRECTED' to 'ELIMINATED'.

    During this phase the FRS service is stopped and Disabled.

    I receive an alert in Change Auditor on Windows 2008 R2 DCs, but not on Windows 2012 R2 DCs. On a 2012 R2…

  • Top 5 Knowledge Base Articles:

  • Video: Active Directory is the heart of your business. That’s why the bad guys want to break it.

    This video is a high level overview of how Change Auditor can protect your Active Directory environment from hackers, external threats and disgruntled employees.

     

  • Latest Version - Change Auditor 6.8

    The current version of Change Auditor is 6.8

    Trial Downloads:

    Current customer, download…