A auckland1 New Member Joined Feb 29, 2016 Feb 29, 2016 #1 Would it be possible to put any type of log / audit in place to see who is using the Active Directory? I'd just like to run it for a week before we shut down the Active Directory. Please explain how to setup the audit?
Would it be possible to put any type of log / audit in place to see who is using the Active Directory? I'd just like to run it for a week before we shut down the Active Directory. Please explain how to setup the audit?
Neemobeer Cloud Security Engineer Staff member Joined Jul 4, 2015 Location Colorado Feb 29, 2016 #2 You just enable "Audit directory service access" it's in Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit\Policy
You just enable "Audit directory service access" it's in Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit\Policy
A auckland1 New Member Joined Feb 29, 2016 Mar 3, 2016 #3 Its enabled but where I can see the events?
Neemobeer Cloud Security Engineer Staff member Joined Jul 4, 2015 Location Colorado Mar 3, 2016 #4 In event viewer