Click here to get back home

Auditing user OU Changes

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Auditing user OU Changes Joe Cormane 02-14-2008
Posted by Joe Cormane on February 14, 2008, 11:48 am
Please log in for more thread options
Is it possible to audit a user changing Organizational Units and the
deletion of Organizational Units with native auditing or does it require a
third-party software?



Posted by Meinolf Weber on February 15, 2008, 5:15 pm
Please log in for more thread options
Hello Joe,

Normal users are ot able to do this except you grant them rights to work
in AD. Check your default domain controllers policy, that auditing is configured.

Check out this one:
http://technet2.microsoft.com/windowsserver/en/library/d9fea7ea-61e5-43b1-98cd-b02a09f101561033.mspx?mfr=true

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Is it possible to audit a user changing Organizational Units and the
> deletion of Organizational Units with native auditing or does it
> require a third-party software?
>



Posted by Joe Cormane on February 15, 2008, 5:28 pm
Please log in for more thread options
Forgive me I did not mean user in the sense of a standard user. I mean an
administrator. I have long since had all of the logging outlined in the
link below enabled. I want to know specifically what can be done beyond
this. I know InTrust for AD has this type of in-depth auditing ability but
I want to be able to do this with free tools -- see if changes to OUs can be
tracked with auditing, which it seems at this point they can't


> Hello Joe,
>
> Normal users are ot able to do this except you grant them rights to work
> in AD. Check your default domain controllers policy, that auditing is
> configured.
>
> Check out this one:
>
http://technet2.microsoft.com/windowsserver/en/library/d9fea7ea-61e5-43b1-98cd-b02a09f101561033.mspx?mfr=true
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Is it possible to audit a user changing Organizational Units and the
>> deletion of Organizational Units with native auditing or does it
>> require a third-party software?
>>
>
>



Similar ThreadsPosted
auditing user access September 13, 2007, 8:37 am
Auditing what a user does -possible software ideas. April 9, 2008, 6:24 am
Login Auditing June 17, 2005, 11:05 am
Auditing Security July 22, 2005, 1:21 pm
Class on Rights and Auditing July 18, 2005, 11:41 am
Auditing on a member server November 9, 2005, 2:30 pm
Auditing Workstation logons from DC January 24, 2006, 7:29 pm
Auditing process kills February 28, 2007, 2:01 pm
security auditing on a share March 1, 2007, 4:13 pm
Auditing Security Events May 10, 2007, 1:54 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap