Re: Audit


"Rajnish" <Rajnish@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2021844C-34D1-4051-BD85-4921B2B2057A@xxxxxxxxxxxxxxxx
How can admin accounts be audited in WIN2k Enviroment for Active
Directory,any member server change?Pl suggest if there is any third party
software available...

First question to ask is "Audit what?".

Files access (and access to other objects) can be audited based on any
group, including Admins.

Account Management in AD has its own specific auditing settings.

There are other possibilities depending on what you wish to monitor.

(Admins can clear the security logs [and thus audits] but a record is always
left of THAT when it is done.)

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


.

Relevant Pages

  • Re: Audit file/folder access
    ... You choose what file or folder you wish to audit and using NTFS security ... auditing tab and choose for Everyone what to audit. ... my Security Event Log is filling up with files access ...
    (microsoft.public.windows.server.security)
  • RE: [Full-Disclosure] Top 15 Reasons Why Admins Use Security Scan ners
    ... > that admins should be the ones to run the scanner. ... I don't think Stuart is saying that ... You still need independent (either outside the company or an audit ...
    (Full-Disclosure)
  • Re: Audit file/folder access
    ... For the folder I want to audit, I use a more restrictive group than ... My problem is that before adding any audit using NTFS security, ... my Security Event Log is filling up with files access ... What can I do to not have those events in my event log? ...
    (microsoft.public.windows.server.security)
  • Re: Audit Mailbox permission changes - Exchange 2007
    ... for auditing when an admin grants mailbox access to another users ... Yes I trust our admins, I am one of the admins that I want to be able ... is being used as it should, and without a good way to show an audit ...
    (microsoft.public.exchange.admin)
  • Auditing mailbox access
    ... opens another user's mailbox? ... We need to audit our Domain ... Admins and make sure no one is reading mail when they ...
    (microsoft.public.exchange.admin)