Direct Inward Dialing: +1 408 916 9892
Auditing Active Directory is perhaps the most important, but also the most difficult task in Active Directory management. Active Directory contains a huge number of objects and resources that need to be constantly monitored for unauthorized changes, application shutdowns and so on. ADAudit Plus helps IT administrators stay on top of their work by providing over 200+ pre-packaged audit reports that cover all AD objects.
In native AD, generating audit reports can be attempted on Windows PowerShell, however it will prove to be a tedious and time-consuming task with limited results. Here is a comparison on generating audit reports on Active Directory objects via Windows PowerShell and ADAudit Plus.
Search-ADAccount –AccountDisabled –UsersOnly –ResultPageSize 2000 –ResultSetSize $null | Select-Object SamAccountName, DistinguishedName Search-ADAccount –AccountDisabled –UsersOnly –ResultPageSize 2000 –ResultSetSize $null | Select-Object SamAccountName, DistinguishedName
Note: To obtain a comprehensive auditing report on the network, several such PowerShell scripts will have to be run.
Here is a sample report on disabled user accounts. As a network best practice, AD user accounts are disabled for a period of time before they are deleted. This list can show administrators that user accounts that need to be deleted. If the disabled users are constantly monitored, the administrator will also be able to easily identify an unauthorized re-enabling of a user account.
There are several drawbacks to using Windows PowerShell to generate reports that are intended to help audit the network:
ADAudit Plus audits the whole network and generates very specific reports and real-time alerts if the network is compromised.
