File Integrity Monitoring not collecting data on DCs
I followed the instructions to setup file integrity reports on the domain controllers in the environment. I also manually added the audit permissions to one of the DC's Windows folders, to see if making modifications there causes any logs to populate, no luck so far. Does the fact that the 'Object Access policy and audit permissions(SACLs) need to be configured to audit the configured servers.' error pops up every time I open the reports mean that it isn't actually configured correctly? Is there
UpdateManager.bat on Version 5000 fails to run
I want to update from 5000 to 5010 but when I try and upgrade it just asks me to backup sql and then just comes back to command line. The Upgrade manager never comes up. Example: CMD As Admin c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>UpdateManager.bat Backup configuration data as a precaution [PgSQL/MySQL] (y/n) ?Y .... Backup OS : windows server 2012 r2 Database Arch : 64 Database Version : 9.2.4 Backup Start Time : 2016-11-17 15:30:52.477 Backup End Time : 2016-11-17 15:48:11.197
Auditig of process creation and termination
ADAudit Plus Process tracking report is not working. Auditing of Process is enabled in the domain and able to see events 4688 and 4689 in the server event log. But nothing showing up in AD AuditPlus process tracking report. Please advise.
The problem with the home page. Alerts.
Hello. I have a strange problem in the new interface. I installed the trial version of the program Product Version 5.0.0 Build No 5000 I did the audit of two local domain. The user administrator on the home page, on the right side, an error warning in two domains. However, if you logged in as a different user, local or domain user with administrator privileges. Messages will not be displayed. If you switch to the old interface messages will be displayed. I have no idea how to solve this problem.
ADAudit management page is inaccessible
I've created a ticket but the waiting seems to be taken forever (which makes me frustrated), and my server is still down, so I hope I can get some help here. Currently my ADAudit management site is not accessible for both HTTP and HTTPS. For HTTP, it keeps adding /home.do to the end of the url, and it says access is forbidden. For HTTPS, it displays like the page is not existing. Here is what happened: 1. Previously we used ADAudit http site with port 80 ok. We tried to config the page to use SSL:
DATABASE Corrupt
Hi, Today morning i moved my ADAudit server to other cluster node and when i started the server , it didn't show anything more. I think database is corrupt. How can i fix it? My logs http://bonitas.zohocorp.com/customer_uploads/2016_10_28_12_27_18_logs.zip
Problem when exporting reports to PDF
When exporting an AD report to a PDF, some of the fields are getting cut off so all of the information is not displayed. This does not happen when exporting to other formats, only PDF. Is this a known issue? Is there a workaround?
CPU Utilization Extremely High
CPU utilization is at 100% majority of the time. AD Audit seems to be at a standstill - takes forever to bring up the login page and not even updating the reports. Running 4 Procs and 8GB RAM
Hi!!!! Please your help ADAudit unstable Windows service
Not lift the service achievement ADAudit. I wrote in the Forum, please your urgent help! It is important this tool. We are available for indications or remote connection. The logs were sent via FTP http://bonitas.zohocorp.com/upload/index.jsp I await answers please Thanks
Stale machine report
Hi, I need to run a report of machines that have not been logged onto or on the network (either works) in the past XX days. I don't see an obvious report (new to AD Audit) can someone let me know how to accomplish this? Thanks.
Domain different UPN
HI, Our domain is different than the logins "UPN" . In the reports it is impossible to select another UPN as the main domain. Do you have a solution ? Thanks you David Martin
log location -> Error while collecting event log data from Domain Controller : xxxx.local
Hi We're getting this message when I shutdown one of the domain controller and we receiving this alert via email My concern is , where can I find this message in the log files , because I want to add this in third party tools monitoring But I can't find where to find the logs files , file name of the logs, and what information in the logs triggering the alert ADAudit Plus Error Error while collecting event log data from Domain Controller : xxxx.local Error Details : The RPC server is unavailable
Folder rename action
I would like to rename the folder which contains a lot of files. Could you please provide details about info I will receive in the audited trail. Do I receive only info about the folder or I will get info about each file inside this folder? Thanks.
Alert: File Modified Warning - reporting wrong information
We have a profile based alert that notifies our team when more than 200 files are modified at one time. Lately we've been getting the notification with the wrong User identified in the message. Such as: Message: User 'wrong user name' Created file/folder '\\servername03\mainfile\facilities\telephone\pay phones'. Modified by: wrong user name The "wrong user name" is actually my name - but I did not access the folder. Why would this be reporting my name instead of the user that actually accessed/modified
AD Audit Personalized logo
Hi there. How can I change the ManageEngine ADAudit Plus logo to our corporate one. We've purchased the software and would like to change this. Thanks.
Send Emails with High Priority Status?
We'd love it if we could have alert emails sent with "High Importance" status. We typically set our mobile devices to only notify us of "high importance" flagged emails, and some alert emails would fall into that category for us. Thanks.
Failed change/delete requests?
Hi there, i am looking for a Report which tells me when and whom tried to delete an Computer Account even when it failed... The Logging on the Domain Controller is configured properly but i cant find this in adaudit. Anyone an idea? Kind regards
Ad Audit File audit - EMC Unity support
EMC Unity is not listed on supported platform page. Does is use same auditing framework as EMC VNX ? Is Unity on your roadmap ?
ADAudit+ Starting Service - AuthenticationService Failed
Dear Manageengine Team, We've installed ADAudit+ a while ago and it was working perfectly until today. Suddenly the services starts and stops a few seconds afterwards. What I see when I try to start the Service via startADAP.bat is the following: Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Users\svc.itm.daud>cd "c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin" c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>startADAP.bat "c:\Program Files
Scheduled charts
I would be very handy to be able to just scheduled charts of data such as 'Logon Failures' etc for wallboard's, manager etc. Stephen Fowles 3rd Line Support Technician North West Ambulance Service - NHS Trust
Agent
Is it possible not to install agent? Thanks
Cloud
Do you have any Azure or Amazon preinstalled images? Thanks
SaaS
Do you have SaaS version? Thanks.
SIEM solutions
ADAudit plan is SIEM solution? What is the difference between ADAudit Plus and EventLog Analyzer ? Thanks.
Large Database
Hi I have a problem with the database (SQL 2008 R2). The database grows and grows, above 85 GB. What can I do, to shrink the database? Kind Regards
Account Lockout Analyzer
I get this error on any users that with locked out accounts. I get no data on devices as well. A lot of our client are now devices like phones and apple ipads. I would like to track down devices by IP if I can't find them as windows machines.
Understanding Caller Machine Name
Hi AdTeam, I have question and need to understand about Caller Machine Name. I found 2 user locked out and when i see caller machine name is different. ie. Username | Caller User Name | Caller Machine Name Cent Bro | DC01$ | \\LAPTOP789 and other Username | Caller User Name | Caller Machine Name Lara Cros | DC01$ | LAPTOP123 My question is, what is different caller machine name with symbol "\\" and without symbol ? I need to find that cause of
AdAudit and Netapp Cdot 8.2
I recently purchased adauditplus and the netapp extension but it doesnt look like cdot 8.2 or 8.3 is supported? Can you please let me know if it i supported and i am mistaken, or can you let me know when you might get this feature implemented.
Granular Exclusions for File Auditing
It seems like you can exclude an account from having it's file auditing events collected but ideally, you would be able to exude certain events from being collected on a per account basis. For example, I have a product that collects detailed file statistics from my large file server. At times, it needs to trawl shares and this generates a huge amount of read operations. I'd like to exclude these read events from being collected but collect any file deletions it might make or other changes.
Event source
What is the event source for ADAudit Plus ? Thanks
no reports showing on my adaudit plus
Hi Everyone, I have installed Adaudit plus recently on trail version , and I was getting users reports such as last log in failed for every users in my domain, recently I purchased a license and for 3 packages domain controllers member servers file servers but after that I am unable to find any report related to my users login on the computers iam not sure whether it's a technical issue or not do I need to buy workstations addons to check last failed login file audit etc..... please find the below
PostgresSQL server failed
I'm trying to upgrade an existing Win2008 ADAudit server and keep getting a information popup windows stating "Trying to start PostgresSQL sever failed at installation". After which the ManageEngine service won't restart w/ a service-specific error Incorrect function. Snapshot reversion fixed the second issue. Suggestions for resolving the first issue so I can successfully upgrade?
Reports Display Service Account as User that has made the AD change.
Is there a way to make the reports show the user that has made the AD change? Our Reports display the service account as User that has made the AD change. Our Helpdesk team use AD Manager and are not Domain Admins. Any ideas?
BUG - Changin custom report privay from 'Just me' to Public fails on new interface
Fails on new interface as above. UI says it has completed successfully but the change does not take effect. If I switch back to old interface it allows me to change scope.
please help
in audit plus error Successfully updated EMC Details Unable to contact EMC Control Station:Connection Refused
Service Won't Start - Issues after installing build 5000
Just installed Build 5000 and now the service wont't start. Windows event log shows: The ManageEngine ADAudit Plus service terminated with service-specific error Incorrect function. The wapper.log file shows STATUS | wrapper | 2016/08/31 11:23:42 | Launching a JVM... INFO | jvm 1 | 2016/08/31 11:23:42 | Unrecognized VM option 'ErrorFile=../logs/hs_err_pid%p.log' INFO | jvm 1 | 2016/08/31 11:23:42 | Could not create the Java virtual machine. ERROR | wrapper | 2016/08/31 11:23:42 | JVM
File Audit not working
We are in the process of setting ADAudit Plus up in our environment. Yesterday I worked with support for a while and they indicated that group policy was not setting the audit policies correctly on the server. I finally figured out that a setting in the ADAuditPlus group policy that the software created had to be changed and then it started auditing events. My problem now is that some file\folder actions appear to register with the console and some do not. I have only 1 share, which is a test share, that
How to change destination folder
Hello, Please help, i just can't figure out how to change the destination folder for adaudit plus backups and logs. they are filling my drive quickly. thank you in advance.
ADAudit Plus options
We are currently licensed for a certain number of DC's but I wanted to ask if the ADAudit plus tool will audit Disk space on DC's and member servers? I realize those are member server licenses that we would need to purchase but just wanted to ask. Thanks, Matt
Archive events
Hi team, I have installed DC on the one server and ADAudit Plus on the other one joined to the domain. The ADAudit Plus service is running under domain admin account. I'm testing the trial version, I have configured the Archive Events to 1 day. The problem is I still don't see the archived files in the Archive Folder by default. Any help will be good. Thanks.
Next Page