High Availability MSSQL
Hello. The Product Configuration > Step 3 instructions say to go to ADAuditPlus DB Query, but this option is missing in version 8.5.3. Could you tell me where ADAuditPlus DB Query is currently located, or is this step still necessary for HA setup? If
Logon Peak Hours Usage
I'm looking for the report that creates the "Logon Peak Hours Usage" graph on the front page. Does anyone know which report it is? Thanks.
WARNING: ADAudit Plus only audits KERBEROS authentication events. It IGNORES NTLM events!!!
I just recently ran into an issue attempting to diagnose an account lockout for some of my users and I found ADAudit Plus registered no bad passwords for them. When manually scouring the AD security logs with EventCombMT.exe from the MS Account Lockout tools, I did find many events for these failures. The failures were NTLM authentication failures which are tracked in Windows via Event ID 4776. After a support call to ManageEngine, I was informed NTLM based events have been removed from auditing because
AD Audit Plus CVE-2025-24813 Tomcat
Hello, I created a ticket for this CVE-2025-24813 vulnerability but it was closed. Is there an ETA for a release of ADAudit Plus that will include the patched tomcat version for this CVE?
Remove report cover pages
Since one of the recent updates, each of the reports I've set to email to me every morning now have a cover page on them. It means that when I'm clicking through them all in the morning I now have to scroll down to the second page on every report. Is
ADAudit Plus Roadmap - 2022/2023
Hi there, Is there a roadmap for the product ADAudit Plus for the upcoming years? I'm specially looking for changes / improvements in the User behavior analytics (BUA) tool section. Thanks a lot for your time. Cheers Arthur
Failure while collecting event log data - ADAudit Plus
Dispite disabling a domain controller under domain settings i still get "Failure while collecting event log data - ADAudit Plus" notifications
AdAudit API
Is there any API for AdAudit plus ?
Why are AD Audit Plus support tickets automatically closed?
I have entered 2 support tickets for AD Audit Plus and they were both immediately closed.
ADAudit Plus is died?
Hello ADAP team. I note that ADAP was last updated more than 2 months ago. Other ME products are more active and are updated very often) Also i cant find any roadmap( Perhaps ADAP is a discontinued product?
Adaudit Plus connect external database
Hello. We`re trying the demos version of adaudit plus. We want it to connect it to external PostgreSQL database. It is possible? and what is the passwor to connect to the internal postgresql database that comes built in? Thank you so much!
Logout after a certain time of inactivity
Is there a way to configure ADAuditPlus so that a user is automatically logged out of AD AuditPlus after a certain time of inactivity in ADAuditPlus?
Remote Desktop Gateway Server audit
How do I setup Remote Desktop Gateway Server audit in the newest version? Thanks!
SSL certificate
Hi, We want to replace the SSL certificate on the server. How can we do this? Thanks.
Error: EventData has more than 2GB so need to disable eventcollection
We Recently started seeing this message for 2 of our DCs EventData has more than 2GB so need to disable eventcollection In addition to this message the ADAuditPLus server appears to be consistently bogged down, CPU wise. We have two DCs in the domain
ADAudit Plus File Server Report
Hello; Is it possible to get a report for file server the files not opened(or accessed) for a specific time. For example the files not opened for 1 year. There is File Read Access option under File Audit=>File Audit Reports=>File Read Access but I need
Deletion of old archive files
Hi there, In looking to "spring clean" our ADAP server before migration to a VM, I've realised that the archives of old events go back to the initial setup of the server several years ago. Is it safe to just delete the archived zip files, and will the
ADAudit server migration procedure
Hello, I’m migrating a client's ADAudit Plus installation from their current server to a new one with an updated operating system (windows server 2019/2022) and I need to confirm the procedure to accomplish this migration. In summary, my execution plan
Send summary view on af specific domain
Hi. How to send the daily summary (under sumary view) only on a specific domains to someone? You can see the differences by choising domain under summary view, but the e-mail including all domains. Thanks. Long H.
ManageEngine security advisory
Yesterday there was an email message from security-advisory@manageengine.com with a "ManageEngine security advisory". How do I subscribe there?
openssl 3.x
Referring to https://pitstop.manageengine.com/portal/en/community/topic/does-endpoint-central-use-openssl-3-x-x-branch Is ADAudit Plus (or any other product from ManageEngine) using openssl 3.x? Reason: CVE-2022-3602 and CVE-2022-3786
Apache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889)
It appears that ADAudit+ is possibly vulnerable to CApache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889) in its current release, I have not validated this beyond our vulnerability detection software (Tenable.io). Can you please validate
Use real SSL certificate for ADAudit website?
I cannot see this in the ADAudit documentation. How can a real SSL certificate be used with ADAudit instead of the self-signed one?
Purge Old datas
Hi, I have a question regarding archiving. Currently I have set Adaudit Plus to archive datas older than 60 days. Our AdAudit Plus\pgsql\data folder is 81Go Our AdAuditplus\archive folder is 5Go But when I search for event, for example on my user, I can find event from June 2016. A little bit more than 60 days. So why I have event "active" with more than 60 days ? Another related question, if I want to purge old archive, I have just to delete the zip file on the folder ?
Need to make an alert on anytime "password never expires" is set
Anyone have this alert and can tell me what is needed? Thanks
Just thought I would share. How far back you can see event data.
If anyone is wonderirng ever, to confirm when you started receiving data on your ADAudit server, just navigate to the following path: "Program Files\ManageEngine\ADAudit Plus\logs\wrapper.log" At the top is when the ADAudit service first started. So we
Backup and Restore Steps AD Audit Plus
Hi, Please someone share the simple PGSQL Backup and Restore steps for AD Audit Plus. Thanks, Ramesh
Can't update AD Audit Plus
Hi, Running ADAudit out of the box with whatever self-signed cert that came with it. However, when I attempt to patch it, I get the following error: " Keystore file not found. Kindly import certificate before applying patch." As far as I can tell, there
Why is the DataEngine Xnode service / modules folder housed on the install folder?
"Program Files\ManageEngine\ADAudit Plus\apps\dataengine-xnode" I get that this feature is to reduce search times but why can't a lot of these audit logs located in the below folder to go MSSQL? Program Files\ManageEngine\ADAudit Plus\apps\dataengine-xnode\data\main\audit-log
Code Signing Certificate for AuditPlus version 7051
So version 7051 of Audit Plus is asking for a certificate to be downloaded as per Download ADAudit Plus Service Pack and enjoy the new product with added audit features (manageengine.com). This seems to be a code signing certificate but our Windows systems
Log4j AD Audit Plus CVE-2021-44228
Hi, i found Log4j-* in /ManageEngine/ADAuditPlus/apps/dataengine-xnode/lib Is there any fix or workaround?
Report for source subnet
Hello community, I'm looking for following report: I want to see the amount of successful logins per subnet. I can see the client ip and username of all successful logins, so the information is basically ready. so for example: User A - Client IP 192.168.10.10
Stop DB Before Windows Updates
Should the DB be stopped before running Windows Updates on ADAudit Plus server
Wrong time in the reports section
Hi After changing the daylight saving time , the reporting hours in ADAudit Plus software have changed. On the main page of the software, the synchronization clock is correct But when I go to the reports, section User Logon Activity , Indicates one
Notifications for Service Pack Releases
Is it possible to get notified when AuditPlus service packs are released i.e. RSS feed or e-mail nitifcation? This would be very useful.
Where do I have to keep my script ?
Hi guys, I want to execute a script when I receive an alert, but I don't know where to store my script ? I tried on my ADAudit+ server, but looks like it doesn't work. I tried: - powershell.exe C:\Scripts\myscript.ps1 - C:\Scripts\myscript.ps1 - C:\
New Script Based Alert Action
Guys, I see in build 5040/5041 you have added the option to fire a script on an alert! This is something I have wanted/asked for for a long time so I am delighted to see that it's made it into the product. Is there any documentation on this feature i..e what script types are allowed (VBScript, powershell etc) and what variables can be passed to that script?
What`s ADAudit Plus default database credentials on PgSQL?
Hi, I need to collect data from database for my own analytical tools. I`ve just installed ADAudit Plus, I know that it uses PgSQL, but I need proper superuser account credentials on SQL server and port number by default.
How to do full Backup and Restore ADAudit Plus correctly
How to do full Backup and Restore ADAudit Plus correctly Hi! ADAudit Plus 6.0.0 was installed with PostgreSQL. Recently, an unknown failure occurred in the web interface and the "User Work Hours" report when generated returns an error that a failure occurred inside the system. In event logs, if you try to view SQL queries and directly execute them in PostgreSQL, they are executed successfully! So the problem isn't in the database? Since version 6.0.0, the data engine-xcode component has been added
How do I add a large list of workstations to the configuration ADAudit Plus 6.0.5?
Hello! There is a list of several hundred workstations in AD, how do I automatically add it to "Server Audit" - > " Configured Server(s)" - > "Workstations" with the application of the AD policy for workstations? We tried several methods: 1. Import using the "cmdUtil.bat" with administrative privileges https://www.manageengine.com/products/active-directory-audit/windows-workstation-auditing-guide-configuring-windows-workstations-using-command-line.html But when entering the command line, successfully
Next Page