Solved

User Accounts Audit - AD users

Posted on 2016-07-19
  • Windows Server 2012
  • Active Directory
  • MS Server OS
  • VB Script
  • Scripting Languages
  • +1
3
42 Views
1 Endorsement
Last Modified: 2016-09-21
Hi all,

I am trying to develop a report to includes win2012R2 AD user accounts successful logins in and out times daily report - as well as Auditing shared folders access to know who did read , write , deleted any file or folder within a specific Shared drive.

I am sure some came across a similar requirement, looking forward hearing from you all.

Cheers
Dash
1
Comment
Question by:Dash Amr
3 Comments
 
LVL 24

Accepted Solution

by:
Mohammed Khawaja earned 250 total points
Comment Utility
What you are trying to do has been done and you can download utilities that could do that.  Have you looked at Netwrix tools where they have some paid as well as some freeware tools to do what you are trying to achieve.

My other suggestion would be turn on all the loggings and then use a tool such as Splunk where you feed Splunk the Windows logs and there are built-in apps/module for standard reports.  

If you wish to write your own then use PowerShell and note that you would have to consolidate many logs from numerous sources/servers which may not be the most optimum/easy way of doing it.
1
 
LVL 1

Assisted Solution

by:XcelogiX
XcelogiX earned 250 total points
Comment Utility
It takes a little bit of setting up, but you can configure Account Logon auditing in a GPO scoped to your Domain Controllers, then forward the Security logs from the DCs to a single server where you can review & export the logs later, as you desire.

The file server can be configured either locally or by GPO to audit File System Access, or use the Advanced Auditing feature to specify what it is you want to record. Don't forget once you do that, you also have to go into the Permissions settings for the folder you want to monitor and add Auditing entries.
1

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Know what services you can and cannot, should and should not combine on your server.
In this fourth video of the Xpdf series, we discuss and demonstrate the PDFinfo utility, which retrieves the contents of a PDF's Info Dictionary, as well as some other information, including the page count. We show how to isolate the page count in a…
In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now