Server Monitor Active Directory Changes Doesn't Capture "The Who" or Caller User Name

nicholas 19
Viewed 0

Is there any way to capture who made the AD changes? Alerts or an audit trail of what changed without knowing who made the changes is much less useful.

We get these fields with PA Server Monitor: Time,Object Name,Change Type,Computer,Object Class,Attribute,Attribute Original Value,Attribute Changed Value

But what we need is the "Caller User Name", which should be the username of the person who made the change. We get this information from ManageEngine ADAudit Plus and would like to replace it with Server Monitor but need this field in the reports for auditing purposes.

activedirectory reports
1 Answers

Hi Nicholas,

The AD Monitor isn't able to collect that type of infomation becasue the AD application doesn't collect and store that type of information. AD changes are most likely handled by the OS.

I imagine that the other products you mentioned are intercepting requests for information that the OS is processing and PASM is not designed to do that.

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

Quinn2713
Related