AD Audit Account Analyzer showing just WORKSTATION
Dear Team, Facing one challenge of account lock out for one user, on checking analyzer in CALL MACHINE NAME column only showing WORKSTATION not actual hostname, why it is like this? Any answers CALLER MACHINE NAME showing just WORKSTATION in AD Audit
java.exe 100% cpu consumption
Is anyone else noticing this issue recently? We are seeing java.exe for ADAudit consistently consume 100% CPU, and ADAudit itself stops functioning with any data gathering/alerts/notifications. We are having to either kill java.exe and restart the service,
Remcom.exe flagged as malicious
Hi, Just tried to upgrade from 8.5.0.0 to 8.5.1.0 and our virusscanner (McAfee) is intercepting the remcom.exe file in the upgrade ppm-file as it thinks it is malicious (Windows Remote Installer). Same problem as described in https://pitstop.manageengine.com/portal/en/community/topic/remcom-exe-flagged-as-malicious.
ADAudit Plus fails to send logs to Splunk HEC — SSLHandshakeException PKIX path building failed with self-signed cert
Hi everyone, I’m trying to forward logs from ManageEngine ADAudit Plus to a Splunk HTTP Event Collector (HEC) over HTTPS. On the Splunk side, HEC is configured with a self-signed certificate. When ADAudit attempts to send data to HEC, I get the following
While Upgrade | The product verison does not match the version of the product. Please contact...
Hello team. while upgrading the product, i got this error message: While Upgrade | The product verison does not match the version of the product. Please contact support.. please how i can upgrade, versions of postgresql and build ad audit is attache
upagde to AdAudit unsuccessfully
① I successfully upagde the AdAudit 7.0.0 to AdAudit 7.2.0 ② I want to upgrade AdAudit Plus with "ManageEngine_ADAudit_Plus_8_1_0_SP-2_1_0.ppm" and "latest.crt" so that i can get the AdAudit 8.1.0 ③ The "Update Manager" says ④ I have never modified any
workstation deleting problem
Hi, I have a problem with workstation deleting from adauditplus plus, the computer is not accessable yet, and I would like to delete it, but i got " Synced server(s) can not be deleted " message. We have log360, i tried to find solution, and i found an
ssl issue
I am attempting to update our expired ssl for ad aduit plus and when I generate a .csr file with the instructions I found here (https://www.manageengine.com/products/active-directory-audit/help/admin-settings/steps-to-enable-ssl.html) the csr file is
Risk-Detection : Insufficient privileges to carry out risk detection.
Hi! AD Audit - Reports - Azure AD - Risk Detection What are the permissions required in Azure for this work correctly? Thanks!
ADAudit migration from PostgreSQL to MSSQL -
Hy. I'm having trouble migrating AD Audit from PostgreSQL to MSSQL - SQL connection gets created, new database gets created, and when data migration starts, it stops at 3%, throwing an error "WorkerPOOL execution terminated forcibly". Any advice is welcome.
Logon events (possible more?) stops showing in web UI every night
We have a problem with the auditing of logon events stops displaying every night. it doesn't come back until I restart the service (ie. the events is monitored but not shown in the web UI). Anyone else had this problem? We tried applying the latest release
Unable to apply latest patch
After running updatemanager.bat I get a message stating: Error: Problem occurred during previous patch installation/uninstallation and has not been reverted to actual state. Hence the setup becomes inconsistent. Please contact support to resolve the problem.
Java.exe Hight CPU usage
Hi ALL I detected hight CPU usage by Java.exe ( Zulu Platform x64 Architecture) at latest several days Version:7.2.0 Build:7201 Anybody have similar situation ??
Ontapp AdAuditPlus
hello everyone, I am using Netapp Ontap v 9.12.1. I am trying to connect with AdAuditPlus. I got the following error. Error in getting Shares,The network path was not found - Error Code:35 Anyone have experience on this? Thanks. https://www.manageen
AD Audit Plus migrate to MS SQL
Hello! I try to transfer the database to MSSQL, but every time I get an error: [SYSERR]|[INFO]|[36]: java.sql.SQLException: Cannot find the symmetric key 'ZOHO_SYMM_KEY', because it does not exist or you do not have permission.| The rights of the sql
error 404 after update to 7080
Hi ALL Anybody has similar issue in build 7080
"ADAudit Plus is not running" after migrating to new server
Hi! We recently migrated ADaudit to another server following the guide. And it is working fine. But after the migration we are getting e-mail that "ADAudit Plus is not running" and the URL is pointing to our old server. Email looks like this. And I can´t
Database data missing after AD Audit Plus patch
Hello. After update to latest Version:7.0.5 Build:7054, all previous data is missing for Active Directory Reports However, all Azure AD data is available: How can I check if the AD data is still in the database and recover it?
The "ManageEngine ADAudit Plus" service is not running
The "ManageEngine ADAudit Plus" service is not running after adding dedicated service account to Log On As tab with the required permissions in order to avoid using Domain Admin account.
There are No Printers Available in the Selected Server
Hi there! We encountered a problem while auditing print jobs. Unable to add a print server to the program: "There Are No Printers Available in The Selected Server". On the server close to the twenty printers. Audit policy is included at the domain level.
updating problem
Hi I recently migrate the DB of ADAudit from Postgres SQL to MSSql server. now according to logs, I can't upgrade the ADAudit plus due to MSSQL errors. image of log file attached. thanks
Fatal stop of data collection ... (DataEngine XNode?)
On the Windows 2019 x64 server, ADAudit Plus (Product Version: 6.0.7, Build No: 6071) is installed using the built-in PostgreSQL database (10.3). This version was raised by patches: 5.3.0, 6.6.0, 7.1.0 (7.1.0 installed after a crash, - the problem was
Can't delete 3 different member servers in AD Audit Plus
Actually I can delete them, but after a while (hours) they are automatically in the list again. I have tried to delete them 3 times now. When they are in the list, they fails to fetch event log data, because they are deleted from the AD and does not exist anymore. How can they be removed from permanently from AD Audit Plus?
ADFS audit stopped working after 6050 upgrade
Hi I updated from 6032 to 6050 and now we receive no ADFS audit info. Is it some known problem with ADFS audit in 6050?
Cannot remove member server
Hi I have a member server I cannot remove. When I try to remove it I get this message: Synced server(s) can not be deleted But I do not know where it is synced from. It show up like this in server list: Because it is synced it does not get imported to Eventlog Analyzer.
File Audit: No Data Available
I have a problem with File Audit. Nothing is displayed in the reports: (No Data Available) All file\folder actions are logged on the server in the Eventlog Security from Server. auditpol /get /category:* shows correct result (compared with Help-Page) Under "Configured Servers -> Windows File Servers" the status is "Success" and also under "Configured Shares" is all green. "Eventlog Property" from this Server also shows me correct values. The service account of ADAudit has full access rights to server
ADAudit+ issue migrating MySQL to MS SQL
I have seen this topic for other products, but not for ADAudit. Running the command prompt as admin logged into the server with the service account that has the access to the MS SQL Server database. After putting in the host name into the ADAudit Plus - DB Configuration application, I get a "Socket Time out while fetching the database instances from host", error. If I ignore this and test the connection with the database name filled out, the command prompt in the background displays a javascript
Exception while checking server status
Hi. We use ADAudit Plus 6.0.0 Build 6010. It is installed on a server that has multiple IP addresses. ADAudit is binding to a single IP address (param "bindaddress=172.16.0.44" is used in "system_properties.conf" file). Also the same ip address is used in "server.xml" file (<Connector SSLEnabled="true" URIEncoding="UTF-8" acceptCount="100" address="172.16.0.44" name="SSL" port="443" scheme="https" secure="true" .....) Everything works fine, but since I always check log files :), I saw a lot of errors
SACL audit issue
Hi, In order to genarate reports about DNS zones and zones I have an error code 57 when trying to configure audit policy automatically. I followed the manually steps to activate audit permission like mentioned in ADAudit Plus documentations but the message of configuring audit enties is still appearing and there is no results shown. I need your help please
ADAudit Plus after 6.0.0-SP-0.1.0
After installing ManageEngine_ADAudit_Plus_5_1_0_SP-3_0_0 I continued to ManageEngine_ADAudit_Plus_6_0_0_SP-0_1_0 once completed and rebooted all I get from apache now is: HTTP Status 403 – Forbidden Type Status Report Message / Description The server understood the request but refuses to authorize it. Was working fine previously, running as a service
upgrade to 5120 failed
Hi I'm traying to upgrade from 5100 to 5120, it say that it update the PostgreSQL first from 9.7 to 10.3 but it failed. any idea? Thanks, Shlomi
Query Exception Occurred in background Database Issue
Hi, Could you please advise i want to load archived data to generate a report for last 6 months ago but i cannot i got the error below: Query Exception Occurred in background Database Issue
how to fix Report error. User Login failures counts 4000 per hour
ADAudit. How to troubleshoot User Login failures Report? The problem is that the user login failure counts 4000 per hour, which is as follows. Event Type: Failure Failure Reason: Account disabled, expired, or locked out Event Number: 4768 Event code: 16 Actually, the user is not locked and can be used normally, or how to avoid being shown in this error in the report. Please help me to fix it thanks
AdAudit / Ad Manager integration
i have a problem with my Ad Audit, i delete 16 users from my AD using Admanager with my personal User "Yvaliente", and the Ad Audit show me this 16 users was eliminated from "Administrator" this is not good.
Upgrade from 4650 to 5000 killed postgres
The upgrade itself worked fine, but when I attempted to restart the server it exited. This is in the logs: [08:56:25:693]|[07-12-2017]|[StartLog]|[INFO]|[20]: The 'product.home' system property. ..| [08:56:25:693]|[07-12-2017]|[StartLog]|[INFO]|[20]: processInfoFileName ..\conf/TrayIconInfo.xml| [08:56:25:693]|[07-12-2017]|[StartLog]|[INFO]|[20]: processInfoFileName file exists | [08:56:25:990]|[07-12-2017]|[StartLog]|[INFO]|[20]: trayIconProps {DefaultMenuItem=StartClient, ApplicationName=ADAP,
Reports in AD Audit Plus stuck every time
Every time i try to get reports from my AD Audit Server , it tries to get some data and always stuck ! the progress bar shows its working but after it reaches NEAR the end , it stucks! and it does not matter how much you wait, it wont success. in our environment , we have 4 dc and ad aoudit is connected to them. please help me fix this problem
No data for user accounts in reports
I only see "Logon Failure" and "Bad Password" user history in my reports. All the other reports for user logons have no data:
ADAudit Plus service will not start after updating from 4661 to 5000.
Recently applied the service pack to update from 4661 to 5000. Since that point the service will not start and displays the attached message. Submitted a support request but have gotten no response.
After Upgrading to 5020 get main class error on start up
Hi We have just upgraded to 5010 and getting the main class error as per This issue have checked for psql and wrapper running etc but still won't start when trying with run.bat from \bin
ADAudit management page is inaccessible
I've created a ticket but the waiting seems to be taken forever (which makes me frustrated), and my server is still down, so I hope I can get some help here. Currently my ADAudit management site is not accessible for both HTTP and HTTPS. For HTTP, it keeps adding /home.do to the end of the url, and it says access is forbidden. For HTTPS, it displays like the page is not existing. Here is what happened: 1. Previously we used ADAudit http site with port 80 ok. We tried to config the page to use SSL:
Next Page