Auditing AD and Exchange

Posted on 2008-10-07
Medium Priority
Last Modified: 2012-05-05
I would like to enable auditing on my domain for both exchange and active directory. Do I need to have GPO that touches the entire enterprise if i want to enable auditing? or can i set the auditing on the server, i would like to track when a user is changed, password updated, disabled/ enabled, and when the rights are changed. Any help would be great.


Question by:HRSBTech

Accepted Solution

JimsZ earned 1500 total points
ID: 22658442
I would go with domain wide GPO personally, although you can set GPO for only "default domain controllers".  You can also set local policies to enable auditing!

Start - Run - Secpol.msc and click "Local Policies" - "Audit Policy" and set your auditing options

Author Comment

ID: 22658668
So if I want to check when all files rights are changed, user rights changed, disabled users, enabled, all these types of things, I can do this with domain wide GPO and apply it to everyone or just do it for the default domain controler policy... if i apply it to the default domain controller policy will it pick up all the changes? since the changes have to be made to an item that lives onthe DC?

make sense?

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Here is a method which can be used to help resolve a "Content Index Failed" error on a Microsoft Exchange Server.
Let us take a look at the scenario, you have a database that is corrupt and you run the ESEUTIL command only to find you are unable to repair it. How do you now get the data back?
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Watch the video to know how one can repair corrupt Exchange OST file effortlessly and convert OST emails to MS Outlook PST file format by using Kernel for OST to PST converter tool. It can convert OST to MSG, MBOX, EML to access them. It can migrate…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question