Home Active Directory (III) 5. Planning Security for Active Directory 5.8 Enabling Auditing of Active Directory Objects

5.8 Enabling Auditing of Active Directory Objects

Marţi, 18 August 2009 16:33 Eugen Morar
Email

In this video i will show you how to enable Auditing of Active Directory Objects.

 

This exercise walks you through the steps you must take to implement auditing of Active Directory objects on domain controllers.
  1. Open the Domain Controller Security Policy tool (located in the Administrative tools program group).
  2. Expand Security Settings, Local Policies, Audit Policy.
  3. Double-click the Audit Directory Service Access policy.
  4. In the Audit Directory Service Access Properties dialog box, place a check mark next to the option for Define These Policy Settings, and check marks at Success and Failure. Click OK to save the settings.
  5. Expand Security Settings, Event Log to see the options associated with the event logs.
  6. Double-click the Maximum Security Log Size item in the right pane of the Domain Controller Security Policy tool, and set the value to 2048KB in the Maximum Security Log Size dialog box. Click OK.
  7. In the right pane of the Domain Controller Security utility, double-click the Retain Security Log item and specify that events should be overwritten after seven days in the Retain Security Log dialog box. Click OK. You will be notified that the Retention Method For Security Log option will also be changed. Click OK to accept the changes.