Re: Domain admin users audit

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 11/23/04


Date: Tue, 23 Nov 2004 21:46:20 -0000

The first step is to enable auditing. You do this through GPO.
 -- http://support.microsoft.com/?id=314955

Once you've enabled auditing then you need a way of checking this. The
cheapest way is via a script. More advanced ways would be through
third-party software such as HP OVOW, MOM, etc.

-- 
Paul Williams
http://www.msresource.net
http://forums.msresource.net
"mISARO" <anonymous@discussions.microsoft.com> wrote in message 
news:161501c4d19c$7b14a370$a501280a@phx.gbl...
Hi,
I need to audit or verify every change that any user with
domain admin  rights do in the Domain Controller.
For instance: User Beth, she removed domain admin rights
to another user who had them. For that reason the user had
several problems working on a project. So the point is how
may I know that she did it ? 'Cos at the same time she has
full rights? How to audit that , or any software to check
and keep a log about what changes or movements do all
domain admins users !!
Thanks any comments !!! 


Relevant Pages

  • Re: Audit domain admins
    ... or "tell me everything any Domain Admin ... cause an audit record. ... can also clear the logs or shut logging off. ... > domain admin rights do in the Domain Controller. ...
    (microsoft.public.win2000.security)
  • Audit domain admins
    ... she removed domain admin rights ... How to audit that, ...
    (microsoft.public.win2000.security)
  • Domain admin users audit
    ... she removed domain admin rights ... How to audit that, ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain admin users audit
    ... > domain admin rights do in the Domain Controller. ... How to audit that, ...
    (microsoft.public.win2000.active_directory)
  • Re: Service accounts best practices
    ... guidance on granting admin accounts. ... >> The only people who should have domain admin rights are the exact people ... >> doing domain admin work and it should be a very small group. ... >>>>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.security)