Solved

Track Active Directory Account Creation, Group Membership, and Deletion

Posted on 2013-12-07
3
826 Views
Last Modified: 2013-12-09
For purposes of change management and compliance:

How can I track when a new AD account is created in our environment and who created it.

I need to ensure that when new accounts are created they correspond to our internal ticketing system.

Ideally I'd like to receive an e-mail alert when a new account is created.

Is there any *free*, Windows Server 2008 built in functionality that can provide this?

I understand there are many 3rd party products, but I need something internal through scripting and automation.
0
Comment
Question by:fireguy1125
3 Comments
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 250 total points
ID: 39703352
You can attach tasks to events  http://portal.sivarajan.com/2010/04/generate-email-alert-to-event-attach.html

You have to have the auditing enabled to track the events.    If you search around you will find other scripts.

I won't post links to any 3rd party products since you are aware.  They make this much easier but as you know they are not free.

Thanks

Mike
0
 
LVL 14

Accepted Solution

by:
Ram Balachandran earned 250 total points
ID: 39703364
Combining Active Directory Auditing and Schedule is a free option.

Enable Active Directory Auditing: http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

Scheduled task to email with an event log trigger: http://blogs.technet.com/b/jhoward/archive/2010/06/16/getting-event-log-contents-by-email-on-an-event-log-trigger.aspx
---

You can also use powershell to get list of IDs created , change 30 to how many you wish

 
Import-Module ActiveDirectory
$When = ((Get-Date).AddDays(-30)).Date
Get-ADUser -Filter * -Properties whenCreated | Where-Object {$_.whenCreated -ge $When}

Open in new window

0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 39703417
Best tool I have used for Auditing purposes at a low cost is AD Audit Plus. Great tool and they have a fully featured 30 day trial. Basically tells you everything that is happening in your environment, you might be surprised on what it shows.

ADAudit Plus  - http://www.manageengine.com/products/active-directory-audit/

Will.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
In previous parts of this Nano Server deployment series, we learned how to create, deploy and configure Nano Server as a Hyper-V host. In this part, we will look for a clustering option. We will create a Hyper-V cluster of 3 Nano Server host nodes w…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question