Link to home
Start Free TrialLog in
Avatar of JonUrban
JonUrbanFlag for United States of America

asked on

AD Logging - Email Address Change

I'd like to log when someone changes an AD profile attribute, and who it was that changed it.

I'm in an environment that is using active directory and syncing profile attributes like "E-mail" to other systems.  

GPO Security Logging is on, however I didn't see an area where "E-mail" changes are being logged in the Event Viewer.
ASKER CERTIFIED SOLUTION
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of JonUrban

ASKER

Thanks Will,

So specifically, if a user changes the email address you can view that change in ADAudit Plus?
If there is a modificaiton done on any part of the User Object that corresponds with Active Directory you will see when it was changed and who changed it.

Any specific changes done from the Exchange EMC or EMS will not reflect in ADAudit Plus as it is an Exchange attribute but if it is in AD i.e email address field it will come up in ADAudit Plus.
I purchased ADAudit, it's a pretty good solution