Re: Is it possible to audit Domain Global Group in AD?
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Tue, 27 Mar 2007 19:18:07 -0700
Auditing is done on the system where the audited is.
You are asking:
Can I in AD set auditing on a group so that it
triggers an audit event "on use" of that group?
Yes, you can but only for the predefined uses (read, change, . . .)
but not for "made member of", let alone "applied in ACL of
resource X on server S via membership is S\localgroup"
Roger
"Mugen" <Mugen@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:81F4377D-DF40-494F-B7D1-85BDC1E9E2EA@xxxxxxxxxxxxxxxx
Hi,
We have a Windows 2003 AD with Single domain here. I have created some
Domain Global groups (Default setting when you create a group) for our
QAs,
Developers. They setup bunch of Windows servers and add our Domain Global
groups to the local groups of their Windows servers and mapped to Windows
server objects (like folder, files etc). I was wondering is there a way
for
me to find out which objects like folder, files etc that are mapping to
their
Windows servers as well as which servers etc. I checked auditing from
group
policy but that's only for if you know which objects and servers to audit.
Thanks.
Mugen
.
- Prev by Date: Re: new DC created
- Next by Date: Re: AD sites and services
- Previous by thread: RE: Pushing out a new Printer to All users
- Next by thread: Re: Is it possible to audit Domain Global Group in AD?
- Index(es):
Relevant Pages
|
