JonUrban
asked on
AD Logging - Email Address Change
I'd like to log when someone changes an AD profile attribute, and who it was that changed it.
I'm in an environment that is using active directory and syncing profile attributes like "E-mail" to other systems.
GPO Security Logging is on, however I didn't see an area where "E-mail" changes are being logged in the Event Viewer.
I'm in an environment that is using active directory and syncing profile attributes like "E-mail" to other systems.
GPO Security Logging is on, however I didn't see an area where "E-mail" changes are being logged in the Event Viewer.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If there is a modificaiton done on any part of the User Object that corresponds with Active Directory you will see when it was changed and who changed it.
Any specific changes done from the Exchange EMC or EMS will not reflect in ADAudit Plus as it is an Exchange attribute but if it is in AD i.e email address field it will come up in ADAudit Plus.
Any specific changes done from the Exchange EMC or EMS will not reflect in ADAudit Plus as it is an Exchange attribute but if it is in AD i.e email address field it will come up in ADAudit Plus.
ASKER
I purchased ADAudit, it's a pretty good solution
ASKER
So specifically, if a user changes the email address you can view that change in ADAudit Plus?