AD win svr 2003 - how do I audit domain admins actions

Posted on 2011-05-04
Last Modified: 2013-12-06
AD win svr 2003 - how do I audit domain admins actions

 As I understand there is a group policy to enable so we can see this.
Question by:gpersand
    LVL 30

    Expert Comment

    LVL 11

    Accepted Solution

    once the Directory Services Access Audit is activated in the Default Domain Controller Policy (choose if you want to track the failures or success, basically i would check success only as you want to track change), then you need to set an SACL entry at the root of your domain.
    To do this i would use adsiedit.msc or dsa.msc with security features enabled.
    Review the advanced security tab to set Audit entry (SACL) for the group "Domain Admins". Review the events or change you want to monitor).
    for some picture and examples.
    LVL 24

    Expert Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
    Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now