has anyone tried before to Audit AD LAPS by Change Auditor ? is its possible ? and if yes , how ?
I need to Audit below LAPS Events :
- Users who have viewed passwords.
- Users who have modified a password's expiration time and date.
Thanks
has anyone tried before to Audit AD LAPS by Change Auditor ? is its possible ? and if yes , how ?
I need to Audit below LAPS Events :
Thanks
sadasdasdasd
sadasdasdasd
sadasdasdasd
sadasdasdasd
sadasdasdasd
Hello,
Change Auditor is capable of capturing when changes are made to the ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExperationTime attributes. Change Auditor is not capable of reporting when a attribute is only viewed as no change has occurred.
To monitor the ms-Mcs-AdmPwd and ms-Mcs-AdmPwdExperationTime attributes for changes, you need to first add them to the list of Monitored attributes. Please see the following KB for instructions on how to add additional attributes:
https://support.quest.com/change-auditor/kb/64270/how-to-add-unmonitored-object-attribute-64270
Thank you,
Darren