ADAudit Plus service will not start after updating from 4661 to 5000.
Recently applied the service pack to update from 4661 to 5000. Since that point the service will not start and displays the attached message. Submitted a support request but have gotten no response.
After Upgrading to 5020 get main class error on start up
Hi We have just upgraded to 5010 and getting the main class error as per This issue have checked for psql and wrapper running etc but still won't start when trying with run.bat from \bin
Schedule Reports not running
After upgrading to build 5010 any scheduled reports, previously created or new, are no longer running. The Last Schedule Status column displays 'Error during previous' run. I have tried looking through the logs to figure out what is causing the error but have not had any luck. I have also attempted to rebuild one of the scheduled reports from scratch to see if that makes a difference however it did not. Please provide guidance on where to look for possible error codes/reasons for the failures.
Alerts ADAudit to Opmanager
Dear, Is it possible to get or send the alerts from ADAudit to Opmanager of RSS feed? We alert screen does not has an automatic update screen and we want te alerts on our monitoring screens. Thank you! Regards, Jerry
Unsuccessful update from ver.4695 to ver.5010. Could not find the main class
hello yesterday i try to update my program from ver.4695 to ver.5010 it was unsuccessful. "Installation Wizard" took a lot of time (more 10 hours) like on picture i cancel it by kill process after restart i will see this: please help. Program not start.
Date time locale in AD audit Plus
I am trying to configure date time locale on our AD Audit plus (admin/personalize) but it only gives me Greek formatting options. I changed the server's regional settings from Greek to English UK but still no luck. The server is Windows 2012 R2 64 bit and AD audit plus is version 4.6.0 build 4685. All dates in Ad audit plus appear in Greek. Any ideas?
UpdateManager.bat on Version 5000 fails to run
I want to update from 5000 to 5010 but when I try and upgrade it just asks me to backup sql and then just comes back to command line. The Upgrade manager never comes up. Example: CMD As Admin c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>UpdateManager.bat Backup configuration data as a precaution [PgSQL/MySQL] (y/n) ?Y .... Backup OS : windows server 2012 r2 Database Arch : 64 Database Version : 9.2.4 Backup Start Time : 2016-11-17 15:30:52.477 Backup End Time : 2016-11-17 15:48:11.197
ADAudit management page is inaccessible
I've created a ticket but the waiting seems to be taken forever (which makes me frustrated), and my server is still down, so I hope I can get some help here. Currently my ADAudit management site is not accessible for both HTTP and HTTPS. For HTTP, it keeps adding /home.do to the end of the url, and it says access is forbidden. For HTTPS, it displays like the page is not existing. Here is what happened: 1. Previously we used ADAudit http site with port 80 ok. We tried to config the page to use SSL:
DATABASE Corrupt
Hi, Today morning i moved my ADAudit server to other cluster node and when i started the server , it didn't show anything more. I think database is corrupt. How can i fix it? My logs http://bonitas.zohocorp.com/customer_uploads/2016_10_28_12_27_18_logs.zip
CPU Utilization Extremely High
CPU utilization is at 100% majority of the time. AD Audit seems to be at a standstill - takes forever to bring up the login page and not even updating the reports. Running 4 Procs and 8GB RAM
ADAudit+ Starting Service - AuthenticationService Failed
Dear Manageengine Team, We've installed ADAudit+ a while ago and it was working perfectly until today. Suddenly the services starts and stops a few seconds afterwards. What I see when I try to start the Service via startADAP.bat is the following: Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Users\svc.itm.daud>cd "c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin" c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>startADAP.bat "c:\Program Files
Large Database
Hi I have a problem with the database (SQL 2008 R2). The database grows and grows, above 85 GB. What can I do, to shrink the database? Kind Regards
Account Lockout Analyzer
I get this error on any users that with locked out accounts. I get no data on devices as well. A lot of our client are now devices like phones and apple ipads. I would like to track down devices by IP if I can't find them as windows machines.
PostgresSQL server failed
I'm trying to upgrade an existing Win2008 ADAudit server and keep getting a information popup windows stating "Trying to start PostgresSQL sever failed at installation". After which the ManageEngine service won't restart w/ a service-specific error Incorrect function. Snapshot reversion fixed the second issue. Suggestions for resolving the first issue so I can successfully upgrade?
File Audit not working
We are in the process of setting ADAudit Plus up in our environment. Yesterday I worked with support for a while and they indicated that group policy was not setting the audit policies correctly on the server. I finally figured out that a setting in the ADAuditPlus group policy that the software created had to be changed and then it started auditing events. My problem now is that some file\folder actions appear to register with the console and some do not. I have only 1 share, which is a test share, that
8007000eERROR_MESSAGE
Failure while collecting event log data - ADAudit Plus [07:52:26:904]|[09-12-2016]|[ADSMLogger]|[INFO]|[125]: WMI ERROR -> key is ServerNameerror values = {ERROR_SEVERITY : SEVEREERROR_CODE : 8007000eERROR_MESSAGE : Not enough storage is available to complete this operation. }, | Server configuration: Server is used only for ADAudit Plus Win2012R2 RAM 8Gb Free disk space 14 Gb Any suggestions?
PGSQL file sizes
We've had AD Audit running for some time now and it seems to be using a lot of disk space. Was hoping someone could point me in the right direction? Archiving is turned on (190 days) and every option is checked. I can see a zip file named "AUDFileAuditInfo_1455258195464.zip" dated 02:00 this morning (17Mb) so this would appear to be working. Folder C:\Program Files (x86)\ManageEngine\ADAudit Plus\pgsql\data\base\ is 40GB in size with files from today all the way back to Sept 2014 The majority of
File Server Audit not excluding ~*
I recently installed the File Server Audit add-on....and even though the default exclusion include files with ~*, I'm still getting large numbers of files showing up in the change or deleted reports that start with ~*. Any one have any suggestions to resolve this? It's cluttering up my reports with a bunch of noise. Thanks
No data available error
We have 8 domain controllers and starting on Monday they won't connect to the DC's and pull any data. is there specific ports that ADAduit Plus relies on. Firewall is turned off on all DC's, we have made not changes to the DC's. We do run Avast on the servers but that has been on the servers for a while now. Any suggestion would be great. Thanks, Matt
Cannot connect to the console
Morning I have setup ADAudit on my server and it is running and collecting. The problem i have is that I have to logon to the server to use it. If i try to go to the address, either http://ip address:8081 or http://fqdn:8081, i get the page cannot be displayed. is there a setting i need to configure? Thanks Wayne
File Server Audting
I have a file server that does not fetch data. I tried to attach a screenshot but it kept failing.
Upgraded AD Audit Plus and now URL Does Not Work
We did an upgrade of AD Audit Plus last night and now when we try to clink on the link to run it we get "page cannot be displayed" This is the link it points to now: http://localhost:8081/ This is the link it used to be: https://support.co.lancaster.pa.us:8444/ When you clink on that link it still says page cannot be displayed. I followed the steps in this link to do the upgrade and everything went well: https://www.manageengine.com/products/active-directory-audit/service-pack.html#buildno Can you
ADAudit Plus Official Documentation
Hi everyone! I´m configurating each ADAudit settings according the oficial documentation and I have some doubts: In the SACL Container configuration doc page (Steps to configure SACL – Containers / 1. Auditing entries for all Containers) there is the following image: According the image, the Apply onto field has a conflit: the window image shows This object and all descendant objects and the same field in the table shows Descendant Container objects. Furthermore the All Extended Rights doesn´t appear
Ignore alerts by specified user
We have a application for HR and the Helpdesk to create, delete and edit users in AD. This is all done by the same service account within AD. Is is possible to filter out the service account user on alerts? When this service account does something we don't need this alerts. In ADAudit is it called the Caller User Name. Thanks, Regads, Jerry
NetApp Audit
Hi, We installed ADAudit last week, and i have some questions. Everything is OK for the Active Directory audit but for the NetApp audit we encountered some problems. Firstly, i cannot access to the information in the "New version" interface. It's not really annoying, but i don't know if it's a bug or if it is related to our implementation. Secondly, queries are very long even when we choose a shorter period. Is there a maximum volume that can handle the product? Indeed the NetApp audit generates
Archiving not decrease size in MS SQL DB
Hello! I need help. MSSQL DB increased to 80 GB. Archiving runs. Zip files are created on the disk. But the DB is not reduced. Continues to rise in size.
inconsistencies setting up FIM on member servers
Hi we have a group of 60+ member servers behind a firewall that I am setting up for FIM and for the most part it appears to work fine but I have some issues. I set up a test where I create a fake dll file on the server then delete it and then see if the data get into ADAudit. I would say this seems to work about 70% of the time. Every time I go to the server make sure "Force audit policy subcategory" is enabled, check SACL on desired folders to be monitored is applied, verify all desired advanced
The RPC server is unavailable - Error Code:6ba
Some servers after removed, the ADAudit presented the following message / email: ADAudit Plus Error Error while collecting event log data from: SERVXXX Error Details: The RPC server is unavailable - Error Code: 6BA Common Error Codes and help Support like about this issue
Restarting the server and automatically running ADAudit
I have installed ADAudit as a service, although after restarting the server i can't get to the site. Scarcely starting manual START ADAudit PLUS allows to get an access to the website of ADAudit. However selection option Start ADAudit Plus automatically at windows startup doesn't work and after the restarting, application always is in condition like below or automatically start is turn off. What should i do to ADAudit will available automatically after the restarting?
Build 4691 serious interface issues
We upgraded our ADaudit in our Test environment from 4685 to 4691. We saw the new logon screen after starting, but after logging in everything looked the same as the previous version (using Chrome 50). I was having some problems creating a Custom Report, so I opened the site in IE11, and suddenly the interface looks completely new. I went back to Chrome50 browser and the interface changed to the new version. My coworker, who is running the same versions of browser, is stuck in the old interface even
Probleme mit Automatischer Useranlage via OU Gruppe
Hallo, ich setze ADAudit Plus aktuell in eriner Trail Version ein. Zur Verwaltung des Tools habe ich eine OU-Gruppe als mögliche Technician an. Die User der Gruppe werden bei erstmaliger Anmeldung angelegt. Jedoch wird der User bei Entfernung aus der OU Gruppe nicht im ADAudit nicht gesperrt bzw hat keine Auswirkung. Ebenfalls auch eine Änderung des Passworts im DC zeigt keine Wirkung im Tool. Lediglich eine Deaktivierung des Users im DC zeigt eine Sperrung des Logins. Könnten Sie mir hier helfen?
Probleme mit Authentifizierung
Hallo, ich setzte ADAudit Plus in der aktuellen Version als TrailVersion ein. Ich habe eine OU Gruppe als Technicans hinzugefügt. Nach erstmaligem einloggen werden die User bei ADAudit angelegt. Jedoch besteht das Problem, das wenn ich die User aus der OU Gruppe entferne, dies keine Auswirkung auf deren Zugang bei ADAudit hat. Ebenfalls hat eine Passwortänderung am DC keine Auswirkung auf den Zugang. Lediglich eine Deaktivierung des Users zeigt Wirkung. Gibt es hier bereits eine Lösung. Vielen Dank.
share not adding for auditing
Hi, I have set up file auditing within ADAudit Plus for one of our file servers and its picking up changes fine. However I am unable to add certain shares for monitoring. I have tried to manual add the sacl permissions and add the share but they are never added to the list of shares that are being monitored. Thanks
Filter local groups in report
We were running the Recently Removed Users from Security Groups report, but we noticed that it is pulling in local group membership removals as well. This became infeasible when a web server began adding and removing a local account repeatedly to a local security group, generating 100+ page reports. However, there appears to be no way to exclude specific accounts if they aren't AD accounts. From searching previous forum posts, it appears your reasoning is that this is because ADaudit is for Active
User '-' Created File
Hello, I just installed ADAudit Plus on a new server and have decided to wait to apply our license to check out some of the features we don't have. I was wondering why under File Audit one of the top users who modified files is showing as "-" We have several events that say "User '-' Created File..." Could someone explain why we are seeing this? Thank you!
InetCache folder taking 30gb
Hello all - We have Ad Manager, Ad Audit, Exchange Reporter and AD Self Service all running on one server. Received an alert for the C: drive running out of space. Investigating, I see there are 30gb+ of temp files in the InetCache folder of the user account. C:\Users\ServiceAccount\AppData\Local\Microsoft\Windows\INetCache\IE - 31.6gb's Additionally, I see that service account is running about 50 instances of IE. Question - 1. Is the inetcache safe to delete? If not, how do I do we shrink that
Yet to fetch event data
Hi, I've added two W2012R2 servers to my trial version as file servers. Yet to fetch event data is permanetly displayed. When I select Run now, I'm prompted to refresh the screen to see the status but the data is never fetched. Steps to troubleshoot this: Added a different file server on WS2012R2 - that fetches data immediately. Added all the shares to auditing Set the SACL via GPO Set Object Access policy via GPO Ran auditpol.exe /get /category:* to confirm I've narrowed it down to Windows Firewall
Error Code 35 with NetApp and some Windows FS
Hi All, I've problem when I try to add NetApp or some Windows File Server to auditing. But I've another Windows FS working fine, but other or NetApp shows Error Code 35 : Error in Creating Terminal Services Home Directory/ Error in Creating Home Directory,The network path was not found when try to get shares. Path's exists and servers are power on and are accesibles via NetBIOS, for example \\NAS\share$ or \\FilServeWindows\share$. Thanks & Regards.
Suppressing Event Details From Alert
I have been customizing the body of an alert for locked out users. The contents of the alert are: Modified Time: %TIME_GENERATED% User Name: %ACCOUNT_NAME% SID: %ACCOUNT_SID% Machine Name: %CALLER_MACHINE_NAME% User Domain: %CALLER_USER_DOMAIN% Domain Controller: %SOURCE% Event Number: %EVENT_NUMBER% Yet, for some reason, when the email is sent, it is appended with "Event Details", 34 additional lines of data that I do not want in my alert email. How do I prevent this from happening?
Folder logging test
Hi All, We're finding our Folder renames and Folder deletions are not getting logged via the File Audit portion of ADAudit Plus. We're on a Windows 2008 R2 platform. Could folks create a folder, rename a folder, delete a folder then see if all these actions are logged? If you could kindly post what server OS you're running and what results you're seeing? Thanks, Brian
Next Page