Folder name change
A folder name may have been changed in the last few months. It's an active server. The folder is currently named 'm'. There are files within this folder that go back a few years. How would I go about learning if it was formerly named something else and
ADAudit is not capturing event ID 4769
Hello, tell me how the problem was solved when events 4769 do not fall into the database? Events on domain controllers are present, the settings are similar to the topic: https://pitstop.manageengine.com/portal/en/community/topic/adaudit-is-not-capturing-event-id-4769
problem with event subscription on member server
i have a old version adaudit plus and I have bought 100 licences for member servers. i have a problem when i click in member server on some servers and event subsriptions on run now, i receive next errors: Error - The requested operation is not supported
Reboot of monitored server with agent after upgrading ADAudit Plus Service (Build 7212)
Hi, I installed an upgrade to the ADAudit Plus Service to Build 7213 from 7210 From the release notes of 7212: Minor bugs in ADAudit Plus' agent and UBA engine have been fixed. Today I learned that the agent is upgraded automatically and this is by design:
Custom Cname Record for the ADAudit Plus Server
Hi, Is it possible to use a custom A record (or CName Record) for the ADAudit Plus server? Right now the server is named following asset naming convention but I'd rather the Operators could browse to a more intuitive ULR such as https://adaudit.company.com
Deletion of old archive files
Hi there, In looking to "spring clean" our ADAP server before migration to a VM, I've realised that the archives of old events go back to the initial setup of the server several years ago. Is it safe to just delete the archived zip files, and will the
adding attribute to new user creation report
Hello, i'm trying to add an attribute to the new user creation report but with no success... the attribute i'm trying to add is a new attribute in the AD create via extension of the scheme can't find the way to add it to my reports thanks
Java.exe Hight CPU usage
Hi ALL I detected hight CPU usage by Java.exe ( Zulu Platform x64 Architecture) at latest several days Version:7.2.0 Build:7201 Anybody have similar situation ??
old version for download ADAudit Plus
Hi, Where can I download all old build version of ADAudit Plus?
ActiveSync Devices Under Account Lockout Analyzer
Hello we have a user that keeps getting locked out. Under the Account Lockout Analyzer, I see three "devices" within the ActiveSync Devices. Does this mean those three devices are causing the lockouts? In https://outlook.office365.com/ecp/ Phone > Mobile
ADAudit server migration procedure
Hello, I’m migrating a client's ADAudit Plus installation from their current server to a new one with an updated operating system (windows server 2019/2022) and I need to confirm the procedure to accomplish this migration. In summary, my execution plan
Custom Work Hours Report
Can we create a custom work hours report? I want to provide a work hours report that looks just like the one you see on the page that only shows the following columns and no underlying log detail. I need a report I will run every Monday to report the
Need to create Alerting Profile to be notified of Disabling Users who are members from a specific group
Need to create Alerting Profile to be notified of Disabling Users who are members from a specific group so I am not able to format the filter condition. Could you please help me.
Widgets from ADAP
Hi ALL We use SDP and there are some Widgets form OpManager. We want include some data from ADAP too but it don't has any widgets options ( Our Helpdesk Team needs Widgets like: Recently Locked Out Users, Recently Disabled Users and other reports Could
ADAudit Plus Roadmap - 2022/2023
Hi there, Is there a roadmap for the product ADAudit Plus for the upcoming years? I'm specially looking for changes / improvements in the User behavior analytics (BUA) tool section. Thanks a lot for your time. Cheers Arthur
User Hours Report Azure
Hey all Is there a version of the User hours report that will work for user working from home?
Azul Zulu Java Multiple Vulnerabilities (2023-01-17)
I am seeing ADAudit Plus flagged for this vulnerability by Tenable/Nessus, running on the latest version of ADAudit+ Azul Zulu Java Multiple Vulnerabilities (2023-01-17): https://docs.azul.com/core/zulu-openjdk/release-notes/january-2023
Looking to start fresh
Hello, I have an active license with ADAudit Plus, but I am looking to wipe the databae and start fresh. A lot of changes have been made for file servers and the current data in there is no longer needed. How can I wipe the Database and start fresh without
User Work Hours
Hi ALL. Who use report "User Work Hours" ? How it works? Every time when we run it we have different results (( Sometime report says that user don't work several days but user works everyday in office in PC with agent((
Ontapp AdAuditPlus
hello everyone, I am using Netapp Ontap v 9.12.1. I am trying to connect with AdAuditPlus. I got the following error. Error in getting Shares,The network path was not found - Error Code:35 Anyone have experience on this? Thanks. https://www.manageen
No option to add email and phone number to adaudit report.
I am attempting to run a report for new AD users created between xyz and xyz that includes all information from there AD account. Including phone number and email address as we populate those fields when creating the AD account. However I don't find where I can add those as a column in the report. Does anyone have information on this?
difference timestamp of last event vs last event read time
after installing new adaudit, it's different like this, what should I do, Any and all help is appreciated. Thanks you
User session recording
Is there a possible way to do a user screen recording when there is an action like opening a browser or compressing a file? Any and all help is appreciated. Thanks you
Audit Report/Summary not working properly
Hi all, We recently migrated our file server to new server. After the migration, Audit Plus unable to track changes on 3 shared drives, while another 3 shared drives are able to be tracked. I already configured the audit setting as per guide, already
Variable in alert email subject
I've created an alert to email me when a user is locked out - pretty easy. What I would like to do, however, is to add the following to the email subject: - username of the user who was locked - name (displayname or lastname and firstname) of the user
AD Audit Plus migrate to MS SQL
Hello! I try to transfer the database to MSSQL, but every time I get an error: [SYSERR]|[INFO]|[36]: java.sql.SQLException: Cannot find the symmetric key 'ZOHO_SYMM_KEY', because it does not exist or you do not have permission.| The rights of the sql
No data available, but policies are configured correctly.
Dear all, maybe someone already had this issue and can point me in the right direction: in ADAuditPlus (latest release), Tab Reports, I am unable to visualize any kind of information regarding LogonAudit, AD Changes, User Management... Is almost everything
Alert when user is moved out of a specific OU
I am trying, unsuccessfully, to create an alert profile that will alert when a user is moved OUT of a specific OU. I have been successful in creating an alert for when a user is moved IN to a specific OU, but not the reverse. Any help would be app
Send summary view on af specific domain
Hi. How to send the daily summary (under sumary view) only on a specific domains to someone? You can see the differences by choising domain under summary view, but the e-mail including all domains. Thanks. Long H.
ADAudit Plus Laps Report
We are looking to audit our LAPS password attribute reads, but we do not use the GUI tool from Microsoft to read the password attribute. The current LAPS Password Read report only seems to get the events that are generated by the gui tool and not the
ManageEngine security advisory
Yesterday there was an email message from security-advisory@manageengine.com with a "ManageEngine security advisory". How do I subscribe there?
openssl 3.x
Referring to https://pitstop.manageengine.com/portal/en/community/topic/does-endpoint-central-use-openssl-3-x-x-branch Is ADAudit Plus (or any other product from ManageEngine) using openssl 3.x? Reason: CVE-2022-3602 and CVE-2022-3786
Source for User Logon Reports\Logon Failures
We don't use all the aspects of AD Audit Plus, just a select few. Most of the reports we need work fine from the audit configs we have. However, under "User Logon Reports", LOgon Failures, Logon Failures based on users, failures due to Bad Password,
Event Log Audit
Am I correct in my suspicion that ADAudit Plus can't monitor ANY random event from the Windows security log? I was dissapointed when I was trying to make a report for event with Id 4657 - https://www.manageengine.com/products/active-directory-audit/kb/object-access-events/event-id-4657.html
Apache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889)
It appears that ADAudit+ is possibly vulnerable to CApache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889) in its current release, I have not validated this beyond our vulnerability detection software (Tenable.io). Can you please validate
Use real SSL certificate for ADAudit website?
I cannot see this in the ADAudit documentation. How can a real SSL certificate be used with ADAudit instead of the self-signed one?
Purge Old datas
Hi, I have a question regarding archiving. Currently I have set Adaudit Plus to archive datas older than 60 days. Our AdAudit Plus\pgsql\data folder is 81Go Our AdAuditplus\archive folder is 5Go But when I search for event, for example on my user, I can find event from June 2016. A little bit more than 60 days. So why I have event "active" with more than 60 days ? Another related question, if I want to purge old archive, I have just to delete the zip file on the folder ?
Remove report cover pages
Since one of the recent updates, each of the reports I've set to email to me every morning now have a cover page on them. It means that when I'm clicking through them all in the morning I now have to scroll down to the second page on every report. Is
Need to make an alert on anytime "password never expires" is set
Anyone have this alert and can tell me what is needed? Thanks
error 404 after update to 7080
Hi ALL Anybody has similar issue in build 7080
Next Page