Re: Last to Modify
From: Will Schneider (william.c.schneiderTAKETHISOUT_at_uth.tmc.edu)
Date: 03/04/05
- Next message: E-Double: "GPO & software installation probs ..."
- Previous message: Mrpush: "Re: Domain Controller, What do I need?"
- In reply to: Chriss3 [MVP]: "Re: Last to Modify"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 4 Mar 2005 11:49:36 -0600
Also what does the pwdlastset attribute consist of?
W
"Chriss3 [MVP]" <noSpamHere@chrisse.se> wrote in message
news:%23T4fuINIFHA.3332@TK2MSFTNGP14.phx.gbl...
> Hello,
> To track changes within Active Directory you have to enable auditing.
> There are two rights for manage password. Rest Password and Change
> Password, By default only the user it self can Change the Password. If
> some one has rest the password for the particular account the security
> context (account) it was made as must have this right delegated as well.
>
> The links below may can be helpful to enable auditing.
>
>
> Audit Policy
> This module describes how to set different settings that apply to
> auditing.
> It also provides an example of audit events created by several common
> tasks.
> http://www.microsoft.com/technet/security/guidance/secmod50.mspx
>
> Microsoft Security: Threats and Countermeasures Guide - Audit Policy
> An audit log records an entry whenever users perform certain actions that
> you specify. For example, the modification of a file or a policy can
> trigger
> an audit entry.
> http://www.microsoft.com/technet/Security/topics/hardsys/tcg/tcgch03.mspx
>
> Microsoft Windows XP - Audit Policy
> This section covers:...
> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/aptopnode.mspx
>
> 814595 - HOW TO: Audit Active Directory Objects in Windows Server 2003
> This step-by-step article describes how to use Windows Server 2003
> auditing
> to track user activities and system-wide events in Active Directory. When
> you use Windows Server 2003 auditing, you can track both user activities
> and
> Windows Server 2003...
> http://support.microsoft.com/default.aspx?scid=kb;en-us;814595
>
> 314955 - HOW TO: Audit Active Directory Objects in Windows 2000
> This step-by-step article describes how to use Windows 2000 auditing to
> track user activities and system-wide events in Active Directory. When you
> use Windows 2000 auditing, you can track both user activities and Windows
> 2000 activities, which are...
> http://support.microsoft.com/default.aspx?scid=kb;en-us;314955
>
> HOW TO: Enable Local Security Auditing in Windows 2000:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;248260
>
> HOWTO: Enabling Local Auditing Policies on Windows 2000:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;252412
>
>
> --
> Regards
> Christoffer Andersson
> Microsoft MVP - Directory Services
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Tips
>
> "Will Schneider" <william.c.schneiderTAKETHISOUT@uth.tmc.edu> skrev i
> meddelandet news:%23jhswDNIFHA.1476@TK2MSFTNGP09.phx.gbl...
>> How can I tell who the last person was to modify an account in Active
>> Directory?
>> Specifically, I need to figure out when a password is changed, if the
>> user changed it at the logon prompt, or if an administrator changed it
>> via the MMC, and who that administrator was.
>>
>> Thanks in advance!!!
>>
>> Will
>>
>
>
- Next message: E-Double: "GPO & software installation probs ..."
- Previous message: Mrpush: "Re: Domain Controller, What do I need?"
- In reply to: Chriss3 [MVP]: "Re: Last to Modify"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
