No Data Available - KB4012216 is NOT installed on Domain Controllers
I get "No Data Available" for "Top User Logon Failures" "Logon Failures - Error Code" and "Logon Peak Hour Usage". I have checked and KB4012216 is NOT installed on our Domain Controllers. For "good measure" i did follow the workaround instructions for that KB with no change. This was fine working Yesterday, but when I logged in today there was "No Data Available". No updates were applied to the server, nor were the domain servers restarted. Only thing I remember doing yesterday was setting up
No data for user accounts in reports
I only see "Logon Failure" and "Bad Password" user history in my reports. All the other reports for user logons have no data:
CryptoGuard / Ransomware - Detected Ransomware for Java Component in ADAudit Plus
Hello Group, I'm having issues with our ADAudit Plus being detected almost daily for "Ransomware" for what appears to be related to "Java" Component for this software. The only indications that our Virus Protection - "Sophos" is that the Java-Process is trying to "encrypt" files. Do you know if this is a legitimate claim for Ransomware or is this apart of the ADAudit Process to "encrypt" information as it's communicating between Servers / Networks? I want to be sure that this is a legit process or
Logon information not available (Security Event Log)
Last tuesday (April 4th, 2017) our 4 Domain Controllers (Windows 2012R2) have been updated with the latest updates from Microsoft and have been seperately rebooted. From that moment our ADAuditPlus server cannot read logon information anymore from our domain. We did not change anything regarding settings in ADAuditPlus (all 4 DC's are available and working), nor did we change anything concerning policies and/or settings on our Domain or it's controllers. There is still some information read from
Archive Events dosn't work - AD Audit
Hi, The archiving doesn’t work. When I start with “Run now”, I become the message “Archiving processed data is started”. But the Archive Folder remains empty. How I must configure the Archive Events? I have already seen several topics related to this but I still can not make it work. Thanks
User Logon Reports - No data available
Hello, I have installed ADAudit Plus and receiving report data for all areas EXCEPT User Logon Reports. Each of the reports states No Data Available. I have checked other sources and there should be data displayed. I stepped through the troubleshooting tips. Confirmed Audit policies were set. User credentials are correct and collecting event information for other areas. Wanted to know if anyone had any ideas on what I can try next. Thanks, Rob.
ADAudit service account locking out at 1am
Hello, The service account for ADAudit plus has been locking out at 1am on one or more of my monitored domains regularly. It is a dedicated service account, 1 per domain, that is only used by ADAudit and the lockouts are coming from the ADAudit server. Any advice on how to troubleshoot how this is happening? Simply unlocking the account allows audit data to be collected, until the next 1am incident. Thanks, Pete
Access Denied
The support articles are extremely vague on details about what an error code means. I have the ADAuditPlus server using a service account that is setup according to this article: http://172.28.100.38:999/help/admin/domain-settings/authentication-for-collecting-audit-data.html The only difference is we've made the service account local admin on the servers placed into the member group for auditing through GPO because we're not individually adding local admins. Also, we're a PCI compliant shop so
Netapp error - not enough resource
I get the following error in getting shares.: Error in getting Shares,Not enough resources are available to complete this operation - Error Code:6b9
Changing service account password
I recently had to change the service account password for the account that runs AdAudit plus. After updating the password for the service I'm still getting logon on failures from that machine. Is there something else I have to change?
ADAudit Plus service will not start after updating from 4661 to 5000.
Recently applied the service pack to update from 4661 to 5000. Since that point the service will not start and displays the attached message. Submitted a support request but have gotten no response.
After Upgrading to 5020 get main class error on start up
Hi We have just upgraded to 5010 and getting the main class error as per This issue have checked for psql and wrapper running etc but still won't start when trying with run.bat from \bin
Schedule Reports not running
After upgrading to build 5010 any scheduled reports, previously created or new, are no longer running. The Last Schedule Status column displays 'Error during previous' run. I have tried looking through the logs to figure out what is causing the error but have not had any luck. I have also attempted to rebuild one of the scheduled reports from scratch to see if that makes a difference however it did not. Please provide guidance on where to look for possible error codes/reasons for the failures.
Alerts ADAudit to Opmanager
Dear, Is it possible to get or send the alerts from ADAudit to Opmanager of RSS feed? We alert screen does not has an automatic update screen and we want te alerts on our monitoring screens. Thank you! Regards, Jerry
Unsuccessful update from ver.4695 to ver.5010. Could not find the main class
hello yesterday i try to update my program from ver.4695 to ver.5010 it was unsuccessful. "Installation Wizard" took a lot of time (more 10 hours) like on picture i cancel it by kill process after restart i will see this: please help. Program not start.
Date time locale in AD audit Plus
I am trying to configure date time locale on our AD Audit plus (admin/personalize) but it only gives me Greek formatting options. I changed the server's regional settings from Greek to English UK but still no luck. The server is Windows 2012 R2 64 bit and AD audit plus is version 4.6.0 build 4685. All dates in Ad audit plus appear in Greek. Any ideas?
UpdateManager.bat on Version 5000 fails to run
I want to update from 5000 to 5010 but when I try and upgrade it just asks me to backup sql and then just comes back to command line. The Upgrade manager never comes up. Example: CMD As Admin c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>UpdateManager.bat Backup configuration data as a precaution [PgSQL/MySQL] (y/n) ?Y .... Backup OS : windows server 2012 r2 Database Arch : 64 Database Version : 9.2.4 Backup Start Time : 2016-11-17 15:30:52.477 Backup End Time : 2016-11-17 15:48:11.197
ADAudit management page is inaccessible
I've created a ticket but the waiting seems to be taken forever (which makes me frustrated), and my server is still down, so I hope I can get some help here. Currently my ADAudit management site is not accessible for both HTTP and HTTPS. For HTTP, it keeps adding /home.do to the end of the url, and it says access is forbidden. For HTTPS, it displays like the page is not existing. Here is what happened: 1. Previously we used ADAudit http site with port 80 ok. We tried to config the page to use SSL:
DATABASE Corrupt
Hi, Today morning i moved my ADAudit server to other cluster node and when i started the server , it didn't show anything more. I think database is corrupt. How can i fix it? My logs http://bonitas.zohocorp.com/customer_uploads/2016_10_28_12_27_18_logs.zip
CPU Utilization Extremely High
CPU utilization is at 100% majority of the time. AD Audit seems to be at a standstill - takes forever to bring up the login page and not even updating the reports. Running 4 Procs and 8GB RAM
ADAudit+ Starting Service - AuthenticationService Failed
Dear Manageengine Team, We've installed ADAudit+ a while ago and it was working perfectly until today. Suddenly the services starts and stops a few seconds afterwards. What I see when I try to start the Service via startADAP.bat is the following: Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Users\svc.itm.daud>cd "c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin" c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>startADAP.bat "c:\Program Files
Large Database
Hi I have a problem with the database (SQL 2008 R2). The database grows and grows, above 85 GB. What can I do, to shrink the database? Kind Regards
Account Lockout Analyzer
I get this error on any users that with locked out accounts. I get no data on devices as well. A lot of our client are now devices like phones and apple ipads. I would like to track down devices by IP if I can't find them as windows machines.
PostgresSQL server failed
I'm trying to upgrade an existing Win2008 ADAudit server and keep getting a information popup windows stating "Trying to start PostgresSQL sever failed at installation". After which the ManageEngine service won't restart w/ a service-specific error Incorrect function. Snapshot reversion fixed the second issue. Suggestions for resolving the first issue so I can successfully upgrade?
File Audit not working
We are in the process of setting ADAudit Plus up in our environment. Yesterday I worked with support for a while and they indicated that group policy was not setting the audit policies correctly on the server. I finally figured out that a setting in the ADAuditPlus group policy that the software created had to be changed and then it started auditing events. My problem now is that some file\folder actions appear to register with the console and some do not. I have only 1 share, which is a test share, that
8007000eERROR_MESSAGE
Failure while collecting event log data - ADAudit Plus [07:52:26:904]|[09-12-2016]|[ADSMLogger]|[INFO]|[125]: WMI ERROR -> key is ServerNameerror values = {ERROR_SEVERITY : SEVEREERROR_CODE : 8007000eERROR_MESSAGE : Not enough storage is available to complete this operation. }, | Server configuration: Server is used only for ADAudit Plus Win2012R2 RAM 8Gb Free disk space 14 Gb Any suggestions?
PGSQL file sizes
We've had AD Audit running for some time now and it seems to be using a lot of disk space. Was hoping someone could point me in the right direction? Archiving is turned on (190 days) and every option is checked. I can see a zip file named "AUDFileAuditInfo_1455258195464.zip" dated 02:00 this morning (17Mb) so this would appear to be working. Folder C:\Program Files (x86)\ManageEngine\ADAudit Plus\pgsql\data\base\ is 40GB in size with files from today all the way back to Sept 2014 The majority of
File Server Audit not excluding ~*
I recently installed the File Server Audit add-on....and even though the default exclusion include files with ~*, I'm still getting large numbers of files showing up in the change or deleted reports that start with ~*. Any one have any suggestions to resolve this? It's cluttering up my reports with a bunch of noise. Thanks
No data available error
We have 8 domain controllers and starting on Monday they won't connect to the DC's and pull any data. is there specific ports that ADAduit Plus relies on. Firewall is turned off on all DC's, we have made not changes to the DC's. We do run Avast on the servers but that has been on the servers for a while now. Any suggestion would be great. Thanks, Matt
Cannot connect to the console
Morning I have setup ADAudit on my server and it is running and collecting. The problem i have is that I have to logon to the server to use it. If i try to go to the address, either http://ip address:8081 or http://fqdn:8081, i get the page cannot be displayed. is there a setting i need to configure? Thanks Wayne
File Server Audting
I have a file server that does not fetch data. I tried to attach a screenshot but it kept failing.
Upgraded AD Audit Plus and now URL Does Not Work
We did an upgrade of AD Audit Plus last night and now when we try to clink on the link to run it we get "page cannot be displayed" This is the link it points to now: http://localhost:8081/ This is the link it used to be: https://support.co.lancaster.pa.us:8444/ When you clink on that link it still says page cannot be displayed. I followed the steps in this link to do the upgrade and everything went well: https://www.manageengine.com/products/active-directory-audit/service-pack.html#buildno Can you
ADAudit Plus Official Documentation
Hi everyone! I´m configurating each ADAudit settings according the oficial documentation and I have some doubts: In the SACL Container configuration doc page (Steps to configure SACL – Containers / 1. Auditing entries for all Containers) there is the following image: According the image, the Apply onto field has a conflit: the window image shows This object and all descendant objects and the same field in the table shows Descendant Container objects. Furthermore the All Extended Rights doesn´t appear
Ignore alerts by specified user
We have a application for HR and the Helpdesk to create, delete and edit users in AD. This is all done by the same service account within AD. Is is possible to filter out the service account user on alerts? When this service account does something we don't need this alerts. In ADAudit is it called the Caller User Name. Thanks, Regads, Jerry
NetApp Audit
Hi, We installed ADAudit last week, and i have some questions. Everything is OK for the Active Directory audit but for the NetApp audit we encountered some problems. Firstly, i cannot access to the information in the "New version" interface. It's not really annoying, but i don't know if it's a bug or if it is related to our implementation. Secondly, queries are very long even when we choose a shorter period. Is there a maximum volume that can handle the product? Indeed the NetApp audit generates
Archiving not decrease size in MS SQL DB
Hello! I need help. MSSQL DB increased to 80 GB. Archiving runs. Zip files are created on the disk. But the DB is not reduced. Continues to rise in size.
inconsistencies setting up FIM on member servers
Hi we have a group of 60+ member servers behind a firewall that I am setting up for FIM and for the most part it appears to work fine but I have some issues. I set up a test where I create a fake dll file on the server then delete it and then see if the data get into ADAudit. I would say this seems to work about 70% of the time. Every time I go to the server make sure "Force audit policy subcategory" is enabled, check SACL on desired folders to be monitored is applied, verify all desired advanced
The RPC server is unavailable - Error Code:6ba
Some servers after removed, the ADAudit presented the following message / email: ADAudit Plus Error Error while collecting event log data from: SERVXXX Error Details: The RPC server is unavailable - Error Code: 6BA Common Error Codes and help Support like about this issue
Restarting the server and automatically running ADAudit
I have installed ADAudit as a service, although after restarting the server i can't get to the site. Scarcely starting manual START ADAudit PLUS allows to get an access to the website of ADAudit. However selection option Start ADAudit Plus automatically at windows startup doesn't work and after the restarting, application always is in condition like below or automatically start is turn off. What should i do to ADAudit will available automatically after the restarting?
Build 4691 serious interface issues
We upgraded our ADaudit in our Test environment from 4685 to 4691. We saw the new logon screen after starting, but after logging in everything looked the same as the previous version (using Chrome 50). I was having some problems creating a Custom Report, so I opened the site in IE11, and suddenly the interface looks completely new. I went back to Chrome50 browser and the interface changed to the new version. My coworker, who is running the same versions of browser, is stuck in the old interface even
Next Page