Configuring ADAudit Plus to audit removable storage devices
Audit all USB plugins and file activities in removable storage devices for all configured Windows domain controllers, servers, and workstations using the supported OS versions.
Configuring Windows domain controllers
To add and set up audit policies for Windows domain controller auditing, follow the steps in this guide.
Note: While configuring the advanced audit policies for Windows domain controllers, ensure that the below audit category is enabled:
Category |
Sub Category |
Audit Events |
Object Access |
Audit Removable Storage |
Success and Failure |
Detailed Tracking |
Audit PNP Activity |
Success and Failure |
Configuring Windows servers
To add and set up audit policies for real-time Windows server auditing and change analytics, follow the steps in this guide.
Note: While configuring the advanced audit policies for Windows servers, ensure that the below audit category is enabled:
Category |
Sub Category |
Audit Events |
Object Access |
Audit Removable Storage |
Success and Failure |
Detailed Tracking |
Audit PNP Activity |
Success and Failure |
Configuring workstations
To add and configure audit policies for workstation auditing, follow the steps in this guide.
Note: While configuring the audit policies for workstations, ensure that the below audit category is enabled:
Category |
Sub Category |
Audit Events |
Object Access |
Audit Removable Storage |
Success and Failure |
Detailed Tracking |
Audit PNP Activity |
Success and Failure |
Don't see what you're looking for?
-
Visit our community
Post your questions in the forum.
-
Request additional resources
Send us your requirements.
-
Need implementation assistance?
Try OnboardPro