Audit Active Directory LAPS by Change Auditor

Hello , 

has anyone tried before to Audit AD LAPS by Change Auditor ? is its possible ? and if yes , how ? 

I need to Audit below LAPS Events :

  • Users who have viewed passwords.
  • Users who have modified a password's expiration time and date. 

Thanks 

Saleem, 

Parents Reply
  • Read events are normally not logged as there are too many - did they tell you how to turn on logging of read events for that property?

    Have you done Google research on where the expiration time and date are stored?  It's probably on the local machine so you would have to install a CA agent on each host to get that data.

Children