Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

 

Windows Server change audit reports

File Integrity Monitoring

  • All File or Folder Changes
  • File (or) Folder Created
  • File (or) Folder Modified
  • File (or) Folder Deleted
  • File (or) Folder Moved
  • File (or) Folder Renamed
  • Folder Permission Changes
  • Folder Audit Setting Changes (SACL)
  • Folder Owner Changes
  • File (or) Folder Copy-N-Pasted
  • Failed attempt to Write File
  • Failed attempt to Delete File

AD LDS Auditing

  • User Mgmt(AD LDS)
  • Group Mgmt(AD LDS)
  • Computer Mgmt(AD LDS)
  • OU Mgmt(AD LDS)
  • GPO Mgmt(AD LDS)
  • Other AD Objects Mgmt(AD LDS)
  • Configuration Mgmt(AD LDS)

ADFS Auditing

  • Logon Success
  • Extranet Lockout
  • Logon Failure

USB Storage Auditing

  • All File or Folder Changes
  • File Read
  • File Modified
  • File Copy and Paste
  • Removable Device Plug In

ADCS Auditing

  • All ADCS activities
  • Certificate Request Status
  • Recently Modified Requests
  • Recently Modified CA Properties
  • Recently Retrieved Keys
  • Certificate Template Changes

Printer Auditing

  • Recent Jobs
  • User Based Reports
  • Printer Usage
  • Printer Based Reports

PowerShell Auditing

  • Process Tracking
  • Script Block Logging
  • Module Logging

AD Replication Audit

  • Replica Sync History
  • Replica Source NC Changes
  • Replica Destination NC Changes
  • AD Object Attributes Replication
  • Lingering Objects Removed From Replica
  • Replication Failures
  • Replication Failure Details

LDAP Auditing

  • Unsecure LDAP Binds
  • No of Daily Unsecure LDAP Bind
  • No of LDAP Queries
  • Recent LDAP Queries
  • Error from LDAP Server
  • No of rejected unsecure LDAP Binds
  • Attempt to make LDAPS connection
  • Time-out LDAP Connection

Network share Auditing

  • Network share changes
  • Network share read
  • Network share added
  • Network share modified
  • Network share delete

Server Audit Reports

  • Summary Report
  • System Events
  • System Time Changed
  • Wifi Connection
  • Wifi DisConnection

Local Logon-Logoff

  • Logon Failures
  • Logon Activity
  • Logon Duration
  • User Work Hours
  • Remote Desktop Services Activity
  • Remote Desktop Gateway
  • RADIUS Logon Failures(NPS)
  • RADIUS Logon History(NPS)
  • Credential Validation
  • Recently Detected Replay Attack
  • Special Groups have been assigned to a New Logon.
  • Wifi Logon Activity

Process Tracking

  • Service Install Attempted
  • Service Started
  • Service Stopped
  • Service Failed
  • Startup Type Modified
  • Scheduled Task Created
  • Scheduled Task Deleted
  • Scheduled Task Modified
  • Scheduled Task Disabled
  • Scheduled Task Enabled
  • New Process Created
  • New Process Exited
  • Who started the Process

Local Account Management

  • Recently Created Users
  • Recently Deleted Users
  • Recently Modified Users
  • Recently Enabled Users
  • Recently Disabled Users
  • Recently Locked Out Users
  • Recently Unlocked Users
  • Recently Password Changed Users
  • Recently Password Set Users
  • Recently Created Groups
  • Recently Deleted Groups
  • Recently Added Members to Groups
  • Recently Removed Members from Groups

Policy Changes

  • User Rights Assigned
  • User Rights Removed
  • Policy Changed

LAPS Audit

  • LAPS Password Read
  • LAPS Password Expiry Changes

Computer Start and Shutdown

  • Computer Startup and Shutdown
  • Computer Last Startup and Shutdown
  • Computers not Shutdown

Netlogon vulnerable Schannel Connection Audit

  • Denied connection from a machine account
  • Denied connection using a trust account
  • Allowed connection
  • Allowed connection from a machine account
  • Allowed connection using a trust account

DNS Changes

  • DNS Nodes Added
  • DNS Nodes Removed
  • DNS Nodes Modified
  • DNS Zones Added
  • DNS Zones Removed
  • DNS Zones Modified
  • DNS Permission Changes

A one-stop solution for all your IT auditing, compliance, and security needs

ADAudit Plus provides capabilities like change auditing, logon monitoring, file tracking, compliance reporting, attack surface analysis, response automation, and backup and recovery for diverse IT systems.

  • Active Directory  
  • Microsoft Entra ID  
  • Windows file servers  
  • NAS file servers  
  • Windows servers  
  • Workstations  
  • And more  

ADAudit Plus Trusted By

Back to Top