Re: Auditing user OU Changes



Forgive me I did not mean user in the sense of a standard user. I mean an
administrator. I have long since had all of the logging outlined in the
link below enabled. I want to know specifically what can be done beyond
this. I know InTrust for AD has this type of in-depth auditing ability but
I want to be able to do this with free tools -- see if changes to OUs can be
tracked with auditing, which it seems at this point they can't


"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb668769f8ca3e3fc33506b0@xxxxxxxxxxxxxxxxxxxxxxx
Hello Joe,

Normal users are ot able to do this except you grant them rights to work
in AD. Check your default domain controllers policy, that auditing is
configured.

Check out this one:
http://technet2.microsoft.com/windowsserver/en/library/d9fea7ea-61e5-43b1-98cd-b02a09f101561033.mspx?mfr=true

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Is it possible to audit a user changing Organizational Units and the
deletion of Organizational Units with native auditing or does it
require a third-party software?





.



Relevant Pages

  • Re: Server 2003 updates fail
    ... Some how the administrators was removed from Manage auditing and security log in the local security setting. ... > Please verify permissions on the following rights include the built-in ... I was log on as the administrator when getting ...
    (microsoft.public.windowsupdate)
  • Re: Windows 2003 Power Cfg Permission
    ... Enabling the auditing of privilege use gave me the info. ... required in order to change Power Options. ... After re-adding the rights to ...
    (microsoft.public.windows.server.security)
  • Re: Error on password reset
    ... auditing to see what rights are being used during the execution. ... > Windows will attempt to disable this account. ... I'm not getting anything in the security event log, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account management events audit !!
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >>controllers). ... >>auditing on the default domain policy. ...
    (microsoft.public.win2000.active_directory)
  • Re: Class on Rights and Auditing
    ... This information is provided "AS-IS" with no warranty, and confers no rights. ... There is not> much to auditing folders and files other that enabling auditing of object> access and then configure the permissions to audit on the folder/file> properties. ... Then you have to parse> the security log for the object access events that relate to the> information you need and that is a bit challenging until you try it for a> while experimenting on a computer. ...
    (microsoft.public.security)