Big savings, Better ROI! Exclusive discounts on ManageEngine Products!* Boost your business *T&C apply
    Click here to shrink
    Click here to expand Click here to expand

    Configuring object-level auditing

    Manual process

    Configure object-level auditing manually using the steps below:

    To configure object-level auditing automatically:

    • Using domain admin credentials, log in to any computer that has Active Directory Users and Computers on it.
    • Go to Start > Windows Administrative Tools > Active Directory Users and Computers.
    • Click View > Advanced features.
    • Right-click on the domain, and go to Properties > Security > Advanced > Auditing > Add.
    • In the Auditing Entry window, click Select a principal. Under Enter the object name to select, type in Everyone, and click OK.

      Advanced security settings for ADAP

    • Select Type: Success. Select the appropriate permissions as directed below.

    Note: Use Clear all to remove all permissions and properties before selecting the appropriate permissions.

    Auditing entry number Auditing entry for Access Apply to Windows Server 2003 Apply to Windows Server 2008/Windows Server 2012
    3 and 4 GPO

    Create groupPolicyContainer objects
    Delete groupPolicyContainer objects

    This object and all child objects This object and all descendant objects

    Write all properties
    Delete
    Modify permissions

    groupPolicyContainer objects Descendant groupPolicyContainer objects

    Permission entry for ADAP

    Don't see what you're looking for?

    •  

      Visit our community

      Post your questions in the forum.

       
    •  

      Request additional resources

      Send us your requirements.

       
    •  

      Need implementation assistance?

      Try onboarding

       

    On this page

    Get download link