Solved

Auditing AD and Exchange

Posted on 2008-10-07
2
362 Views
Last Modified: 2012-05-05
I would like to enable auditing on my domain for both exchange and active directory. Do I need to have GPO that touches the entire enterprise if i want to enable auditing? or can i set the auditing on the server, i would like to track when a user is changed, password updated, disabled/ enabled, and when the rights are changed. Any help would be great.

Thanks

Matt
0
Comment
Question by:HRSBTech
2 Comments
 
LVL 6

Accepted Solution

by:
JimsZ earned 500 total points
Comment Utility
I would go with domain wide GPO personally, although you can set GPO for only "default domain controllers".  You can also set local policies to enable auditing!

Start - Run - Secpol.msc and click "Local Policies" - "Audit Policy" and set your auditing options
0
 

Author Comment

by:HRSBTech
Comment Utility
So if I want to check when all files rights are changed, user rights changed, disabled users, enabled, all these types of things, I can do this with domain wide GPO and apply it to everyone or just do it for the default domain controler policy... if i apply it to the default domain controller policy will it pick up all the changes? since the changes have to be made to an item that lives onthe DC?

make sense?
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now