AD Audit Account Analyzer showing just WORKSTATION
Dear Team, Facing one challenge of account lock out for one user, on checking analyzer in CALL MACHINE NAME column only showing WORKSTATION not actual hostname, why it is like this? Any answers CALLER MACHINE NAME showing just WORKSTATION in AD Audit
java.exe 100% cpu consumption
Is anyone else noticing this issue recently? We are seeing java.exe for ADAudit consistently consume 100% CPU, and ADAudit itself stops functioning with any data gathering/alerts/notifications. We are having to either kill java.exe and restart the service,
Remcom.exe flagged as malicious
Hi, Just tried to upgrade from 8.5.0.0 to 8.5.1.0 and our virusscanner (McAfee) is intercepting the remcom.exe file in the upgrade ppm-file as it thinks it is malicious (Windows Remote Installer). Same problem as described in https://pitstop.manageengine.com/portal/en/community/topic/remcom-exe-flagged-as-malicious.
ADAudit plus member servers list auto refreshes every few seconds.
Hello, I'm attempting to manage member servers, but the list auto-refreshes so quickly I can't scroll down through the list. By the time I get to the server I'm looking for it shoots me right back up to the top of the list. Is there a setting for this
ADAudit Plus fails to send logs to Splunk HEC — SSLHandshakeException PKIX path building failed with self-signed cert
Hi everyone, I’m trying to forward logs from ManageEngine ADAudit Plus to a Splunk HTTP Event Collector (HEC) over HTTPS. On the Splunk side, HEC is configured with a self-signed certificate. When ADAudit attempts to send data to HEC, I get the following
AD Audit Plus CVE-2025-24813 Tomcat
Hello, I created a ticket for this CVE-2025-24813 vulnerability but it was closed. Is there an ETA for a release of ADAudit Plus that will include the patched tomcat version for this CVE?
Failure while collecting event log data - ADAudit Plus
Dispite disabling a domain controller under domain settings i still get "Failure while collecting event log data - ADAudit Plus" notifications
Why are AD Audit Plus support tickets automatically closed?
I have entered 2 support tickets for AD Audit Plus and they were both immediately closed.
While Upgrade | The product verison does not match the version of the product. Please contact...
Hello team. while upgrading the product, i got this error message: While Upgrade | The product verison does not match the version of the product. Please contact support.. please how i can upgrade, versions of postgresql and build ad audit is attache
upagde to AdAudit unsuccessfully
① I successfully upagde the AdAudit 7.0.0 to AdAudit 7.2.0 ② I want to upgrade AdAudit Plus with "ManageEngine_ADAudit_Plus_8_1_0_SP-2_1_0.ppm" and "latest.crt" so that i can get the AdAudit 8.1.0 ③ The "Update Manager" says ④ I have never modified any
NTLM authentication logs
Good afternoon. I want to enable NTLM authentication logging in ADAudit v8.0.0.8003. But I can’t find this parameter where it was before. Tell me, where is this enabled now?
workstation deleting problem
Hi, I have a problem with workstation deleting from adauditplus plus, the computer is not accessable yet, and I would like to delete it, but i got " Synced server(s) can not be deleted " message. We have log360, i tried to find solution, and i found an
ssl issue
I am attempting to update our expired ssl for ad aduit plus and when I generate a .csr file with the instructions I found here (https://www.manageengine.com/products/active-directory-audit/help/admin-settings/steps-to-enable-ssl.html) the csr file is
Ad Audit Plus - Install Without a Domain
Hi everyone a company asked us to install Ad Audit plus just to audit Synology Nas files. The company does not have a domain and the computers are all MACs. We have installed the product demo but it does not allow you to proceed unless you specify a domain.
AD AUDIT Plus fails to load
All other feathers of Manage Engine appears to work but when we attempt to load into ADAudti Plus we are greated with this screen.
ADAudit: How to alert on a server reboot ?
Need to know when a server is rebooted or shutdown. How do I set this up for a specific server?
Risk-Detection : Insufficient privileges to carry out risk detection.
Hi! AD Audit - Reports - Azure AD - Risk Detection What are the permissions required in Azure for this work correctly? Thanks!
Error install Service Pack
I am trying to install service pack 7_2_0_SP-6_0_0 we are currently running 7.2.0, Build 7212. Whenever I do the update I get the error message "Please start the product, then stop it, and then apply the service pack" I have done this several times but
ADAudit migration from PostgreSQL to MSSQL -
Hy. I'm having trouble migrating AD Audit from PostgreSQL to MSSQL - SQL connection gets created, new database gets created, and when data migration starts, it stops at 3%, throwing an error "WorkerPOOL execution terminated forcibly". Any advice is welcome.
Logon events (possible more?) stops showing in web UI every night
We have a problem with the auditing of logon events stops displaying every night. it doesn't come back until I restart the service (ie. the events is monitored but not shown in the web UI). Anyone else had this problem? We tried applying the latest release
Unable to apply latest patch
After running updatemanager.bat I get a message stating: Error: Problem occurred during previous patch installation/uninstallation and has not been reverted to actual state. Hence the setup becomes inconsistent. Please contact support to resolve the problem.
Error: EventData has more than 2GB so need to disable eventcollection
We Recently started seeing this message for 2 of our DCs EventData has more than 2GB so need to disable eventcollection In addition to this message the ADAuditPLus server appears to be consistently bogged down, CPU wise. We have two DCs in the domain
Audit policy Information is inconsistent
In AD Audit you have the ability to check the Audit Policy Status. (https://adaudit.server.internal/#/admin/rsop) This indicates what is required. If you follow the link on a report to troubleshoot missing data you get taken to the help files where a
ADAudit is not capturing event ID 4769
Hello, tell me how the problem was solved when events 4769 do not fall into the database? Events on domain controllers are present, the settings are similar to the topic: https://pitstop.manageengine.com/portal/en/community/topic/adaudit-is-not-capturing-event-id-4769
Reboot of monitored server with agent after upgrading ADAudit Plus Service (Build 7212)
Hi, I installed an upgrade to the ADAudit Plus Service to Build 7213 from 7210 From the release notes of 7212: Minor bugs in ADAudit Plus' agent and UBA engine have been fixed. Today I learned that the agent is upgraded automatically and this is by design:
Java.exe Hight CPU usage
Hi ALL I detected hight CPU usage by Java.exe ( Zulu Platform x64 Architecture) at latest several days Version:7.2.0 Build:7201 Anybody have similar situation ??
Ontapp AdAuditPlus
hello everyone, I am using Netapp Ontap v 9.12.1. I am trying to connect with AdAuditPlus. I got the following error. Error in getting Shares,The network path was not found - Error Code:35 Anyone have experience on this? Thanks. https://www.manageen
AD Audit Plus migrate to MS SQL
Hello! I try to transfer the database to MSSQL, but every time I get an error: [SYSERR]|[INFO]|[36]: java.sql.SQLException: Cannot find the symmetric key 'ZOHO_SYMM_KEY', because it does not exist or you do not have permission.| The rights of the sql
Event Log Audit
Am I correct in my suspicion that ADAudit Plus can't monitor ANY random event from the Windows security log? I was dissapointed when I was trying to make a report for event with Id 4657 - https://www.manageengine.com/products/active-directory-audit/kb/object-access-events/event-id-4657.html
Apache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889)
It appears that ADAudit+ is possibly vulnerable to CApache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889) in its current release, I have not validated this beyond our vulnerability detection software (Tenable.io). Can you please validate
error 404 after update to 7080
Hi ALL Anybody has similar issue in build 7080
ADAudit Plus - User name encoding error
We have been using ADAudit Plus for nearly a year, and receive daily summary emails that detail logon activity. I have seen sporadic issues with user names present in this report, maybe once every other month. The issue appears to be some kind of encoding/decoding
"ADAudit Plus is not running" after migrating to new server
Hi! We recently migrated ADaudit to another server following the guide. And it is working fine. But after the migration we are getting e-mail that "ADAudit Plus is not running" and the URL is pointing to our old server. Email looks like this. And I can´t
Unable to create an alert that triggers if something is renamed in an OU
Hello all, I'm trying to create an alert that is triggered if someone renames a group in an OU. We have checked and the auditing is turned on for add/remove OU objects on the entire domain, so I don't think that's the issue. My current settings for the
Database data missing after AD Audit Plus patch
Hello. After update to latest Version:7.0.5 Build:7054, all previous data is missing for Active Directory Reports However, all Azure AD data is available: How can I check if the AD data is still in the database and recover it?
java array size exceeds
Hi adaudit service stops after 5 times resetting and facing this error in every 5 minute: java.lang.outofmemoryerror: requested array size exceeds VM limit This problem happend after I just upgrade to 7050 I have changed the heap size to (wrapper.conf):
The "ManageEngine ADAudit Plus" service is not running
The "ManageEngine ADAudit Plus" service is not running after adding dedicated service account to Log On As tab with the required permissions in order to avoid using Domain Admin account.
Migration of AD Audit to a new server failed. Looks to be due to SQL Native Client not been recognised
Hi, I've recently tried to migrate our AD Audit Plus server from 2008 to a 2019 windows standard server. This points to a remote Windows SQL 2012 database instance. It hasn't been able to write data back to the database. As we've got a backup of the migrated
There are No Printers Available in the Selected Server
Hi there! We encountered a problem while auditing print jobs. Unable to add a print server to the program: "There Are No Printers Available in The Selected Server". On the server close to the twenty printers. Audit policy is included at the domain level.
updating problem
Hi I recently migrate the DB of ADAudit from Postgres SQL to MSSql server. now according to logs, I can't upgrade the ADAudit plus due to MSSQL errors. image of log file attached. thanks
Next Page