Search found 4 matches

by fenixryan
Mon Nov 09, 2009 9:14 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Trying to audit active directory account operations
Replies: 6
Views: 13539

also getting this: Message from HostMonitor (host changed status) Test : NTLog \\Valencia:Security\Security Method: check NT Event Log Status : Unknown Date : 09/11/2009 14:41:22 Reply : System Error. Code: 87. The parameter is incorrect Recurrences : 1 Last status: Ok Total tests: 397 Alive ratio :...
by fenixryan
Mon Nov 09, 2009 9:13 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Trying to audit active directory account operations
Replies: 6
Views: 13539

I see all the changes in the security event log with the corresponding admin accounts that have made the changes.
by fenixryan
Fri Nov 06, 2009 5:08 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Trying to audit active directory account operations
Replies: 6
Views: 13539

thanks alex

Hi I've added event ID 645 and 647 and set to "Description contains: any text"
but still no joy, I created a couple of test users and deleted them at random times with two different admin accounts only one changed was flagged???!!!
by fenixryan
Thu Nov 05, 2009 10:35 am
Forum: Configuration, Maintenance, Troubleshooting
Topic: Trying to audit active directory account operations
Replies: 6
Views: 13539

Trying to audit active directory account operations

Hi, Backround: We have a 2003 active directory domain with multiple helpdesk admins. I wish to audit their creation of accounts and computer objects on the domain. I have setup hostmonitor v8.28 to monitor the three domain servers event logs for the items I list below. This to provide a seperate aud...