Re: Last to Modify
From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 03/04/05
- Next message: steve: "Re: Disaster Recovery"
- Previous message: Mr. Smith: "Re: Last to Modify"
- In reply to: Will Schneider: "Last to Modify"
- Next in thread: Will Schneider: "Re: Last to Modify"
- Reply: Will Schneider: "Re: Last to Modify"
- Reply: Will Schneider: "Re: Last to Modify"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 4 Mar 2005 16:52:31 +0100
Hello,
To track changes within Active Directory you have to enable auditing. There
are two rights for manage password. Rest Password and Change Password, By
default only the user it self can Change the Password. If some one has rest
the password for the particular account the security context (account) it
was made as must have this right delegated as well.
The links below may can be helpful to enable auditing.
Audit Policy
This module describes how to set different settings that apply to auditing.
It also provides an example of audit events created by several common tasks.
http://www.microsoft.com/technet/security/guidance/secmod50.mspx
Microsoft Security: Threats and Countermeasures Guide - Audit Policy
An audit log records an entry whenever users perform certain actions that
you specify. For example, the modification of a file or a policy can trigger
an audit entry.
http://www.microsoft.com/technet/Security/topics/hardsys/tcg/tcgch03.mspx
Microsoft Windows XP - Audit Policy
This section covers:...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/aptopnode.mspx
814595 - HOW TO: Audit Active Directory Objects in Windows Server 2003
This step-by-step article describes how to use Windows Server 2003 auditing
to track user activities and system-wide events in Active Directory. When
you use Windows Server 2003 auditing, you can track both user activities and
Windows Server 2003...
http://support.microsoft.com/default.aspx?scid=kb;en-us;814595
314955 - HOW TO: Audit Active Directory Objects in Windows 2000
This step-by-step article describes how to use Windows 2000 auditing to
track user activities and system-wide events in Active Directory. When you
use Windows 2000 auditing, you can track both user activities and Windows
2000 activities, which are...
http://support.microsoft.com/default.aspx?scid=kb;en-us;314955
HOW TO: Enable Local Security Auditing in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;248260
HOWTO: Enabling Local Auditing Policies on Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;252412
-- Regards Christoffer Andersson Microsoft MVP - Directory Services No email replies please - reply in the newsgroup ------------------------------------------------ http://www.chrisse.se - Active Directory Tips "Will Schneider" <william.c.schneiderTAKETHISOUT@uth.tmc.edu> skrev i meddelandet news:%23jhswDNIFHA.1476@TK2MSFTNGP09.phx.gbl... > How can I tell who the last person was to modify an account in Active > Directory? > Specifically, I need to figure out when a password is changed, if the user > changed it at the logon prompt, or if an administrator changed it via the > MMC, and who that administrator was. > > Thanks in advance!!! > > Will >
- Next message: steve: "Re: Disaster Recovery"
- Previous message: Mr. Smith: "Re: Last to Modify"
- In reply to: Will Schneider: "Last to Modify"
- Next in thread: Will Schneider: "Re: Last to Modify"
- Reply: Will Schneider: "Re: Last to Modify"
- Reply: Will Schneider: "Re: Last to Modify"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
