Link to home
Start Free TrialLog in
Avatar of HRSBTech
HRSBTechFlag for Canada

asked on

Auditing AD and Exchange

I would like to enable auditing on my domain for both exchange and active directory. Do I need to have GPO that touches the entire enterprise if i want to enable auditing? or can i set the auditing on the server, i would like to track when a user is changed, password updated, disabled/ enabled, and when the rights are changed. Any help would be great.

Thanks

Matt
ASKER CERTIFIED SOLUTION
Avatar of JimsZ
JimsZ

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of HRSBTech

ASKER

So if I want to check when all files rights are changed, user rights changed, disabled users, enabled, all these types of things, I can do this with domain wide GPO and apply it to everyone or just do it for the default domain controler policy... if i apply it to the default domain controller policy will it pick up all the changes? since the changes have to be made to an item that lives onthe DC?

make sense?