Microsoft Active Directory Monitoring

[Venki]

Hi,
I have the following requirement to write a Microsoft Active Directory
programming

- Real Time/Near Real time Microsoft Active Directory changes detection
- Need to find out who the perpetrator/user that caused the change to
occur, this might also be a computer but a user must be reported if a user
actually triggered the event

- The old value and the new value that got changed.

Any suggestions on the Micrsoft SDK/ADSI that can be used to achieve this
would be useful.

Thanks.

[Joe Kaplan]

Have you read the AD SDK docs on tracking changes? That should be your
first stop.

Note that the person who made a specific change isn't stored in the
directory, so if you need that info you'll need to get it through other
means such as audit logs perhaps. It can be a difficult thing to achieve.

I've heard of people hooking into Windows event tracing to get some of this
information as well but I don't know if that is supported or documented
anywhere.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--

Post by Venki
Hi,
I have the following requirement to write a Microsoft Active Directory
programming
- Real Time/Near Real time Microsoft Active Directory changes detection
- Need to find out who the perpetrator/user that caused the change to
occur, this might also be a computer but a user must be reported if a user
actually triggered the event
- The old value and the new value that got changed.
Any suggestions on the Micrsoft SDK/ADSI that can be used to achieve this
would be useful.
Thanks.

[r***@gmail.com]

Hey please update at what sense you want to do monitoring. If you are concern about the ActiveDirectory Mointoring i.e the all the user who are enrolled at Active Directory at that case i can say please go for a third party tool such a Lepide Auditor For AD. This tool will monitor all the Activity that took place with in the Active Directory .

You can download the tool from the given link.

http://www.lepide.com/active-directory-audit/

Hope it helps you .

Thanks.

Post by Venki
Hi,
I have the following requirement to write a Microsoft Active Directory
programming
- Real Time/Near Real time Microsoft Active Directory changes detection
- Need to find out who the perpetrator/user that caused the change to
occur, this might also be a computer but a user must be reported if a user
actually triggered the event
- The old value and the new value that got changed.
Any suggestions on the Micrsoft SDK/ADSI that can be used to achieve this
would be useful.
Thanks.