Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

AD Auditing Logs

Posted on 2013-01-21
2
Medium Priority
?
254 Views
Last Modified: 2013-01-26
Dear All,

What are the recommendations to enable and configure windows 2008 R2 Active Directory Auditing Logs?

Thanks
0
Comment
Question by:Rhala
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 3

Expert Comment

by:AliQahtani
ID: 38800652
Hi Rhala,

can you please check the link from EE
http://www.experts-exchange.com/Security/Misc/Q_27596995.html
0
 
LVL 3

Accepted Solution

by:
jeorge earned 2000 total points
ID: 38800720
Since at Active Directory there are many of the events in built which are needed to be revised on a daily basis. If the auditing is enabling then only it will appear. Like security logs if its not enable then you wont be able to get the user and its security information.

For instance like if we create a user and then after few days time we delete the user, then its the ad auditor who lets us know what we did and created.

Moreover there are many of the events which we need to calculate. Then at that moment its compulsory to enable the auditing logs.

The link recommended by ali is recommendable and moreover you can refer this link also.

http://www.windowsecurity.com/articles/Auditing-Users-Groups-Windows-Security-Log.html

http://goo.gl/caFvf

I hope it helps you out.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question