Hi, I'm Shawn Barker, Product Manager at Dell Software. And today I'm going to demonstrate how Dell Change Auditor can audit changes to Microsoft Lync. Change Auditor for Lync audits, alerts, and reports on administrator activity, security, and configuration changes in real time.
As I can see in the change auditor client, there are a number of built in searches for Lync configuration. I'm going to run the all Lync events in the last seven days search. If I group by event, I can very easily see the different types of activity that are being audited, including when users are added and removed from Lync administrative groups, when users are enabled are disabled for Lync use, when user policies or configuration options are changed, or when critical Lync configuration options are modified.
Every event displays all important information in a simple, readable format, which includes when the change was made, where the change was made, what object was changed, who made the change, and even the workstation or IP address where the change was initiated from. Even more importantly, I get the before and the after value so I can quickly troubleshoot unwanted changes and roll them back if necessary.
From any event, I can even perform a quick related search to see all the activity related to the user. So in this case, I have a change made by Barry [? Time, ?] one of my Lync administrators. With one click, I can run a related search and view all of the activity related to that user, not only in Lync but across Active Directory in the rest of my environment recently.
So I can see, for example, that there have been recent changes made to this user's account in the Active Directory and they've also been added to active directory groups. This related search gives me instant, one click access to all user activity related to the event in question. And it makes forensic investigation significantly easier.
Change Auditor also makes all this audit data available through a web client so that you can access it from anywhere.
So I can use the event timeline feature to quickly plot all of the audit events on an interactive timeline where I can quickly see important events, highlight them from the timeline, view the high level information, and then drill down to get the same detailed information about the event that I saw before.
I can use the built in searches, I can customize them with my own filters, or I can create my own searches. So for example, I want to create a search that shows all Lync activity related to one specific user. For every search I can specify my own filters, including who, what, where, when, and the origin. In this case, I'm going to specify a specific user in the who field so that this search only returns audit events related to that user. And I'll also specify a time frame so all audit events in the last day.
Once I save a search, I can very easily turn it into a scheduled report that I would receive in my inbox on a regular basis or a time alert that I could receive on my phone. In this case, I'll configure this as a real time email alert that will be sent to our security group every time an audit event is found related to that user.
That's how easy it is to start auditing, alerting, and reporting on Lync configuration activity with Change Auditor. For more information about Change Auditor or to start your free trial, visit software.dell.com/change-auditor.