- CPU Utilization Extremely High- CPU utilization is at 100% majority of the time. AD Audit seems to be at a standstill - takes forever to bring up the login page and not even updating the reports. Running 4 Procs and 8GB RAM 
- Hi!!!! Please your help ADAudit unstable Windows service- Not lift the service achievement ADAudit. I wrote in the Forum, please your urgent help! It is important this tool. We are available for indications or remote connection. The logs were sent via FTP  http://bonitas.zohocorp.com/upload/index.jsp  I await answers please Thanks 
- Stale machine report- Hi, I need to run a report of machines that have not been logged onto or on the network (either works) in the past XX days. I don't see an obvious report (new to AD Audit) can someone let me know how to accomplish this? Thanks.  
- Domain  different UPN- HI, Our domain is different than the logins "UPN" . In the reports it is impossible to select another UPN as the main domain. Do you have a solution ? Thanks you David Martin 
- log location -> Error while collecting event log data from Domain Controller  : xxxx.local- Hi We're getting this message when I shutdown one of the domain controller and we receiving this alert via email My concern is , where can I find this message in the log files , because I want to add this in third party tools monitoring   But I can't  find where to find  the logs files ,  file name of the logs, and what information in the logs triggering the alert ADAudit Plus Error Error while collecting event log data from Domain Controller  : xxxx.local Error Details : The RPC server is unavailable 
- Folder rename action- I would like to rename the folder which contains a lot of files. Could you please provide details about info I will receive in the audited trail. Do I receive only info about the folder or I will get info about each file inside this folder? Thanks. 
- Alert: File Modified Warning - reporting wrong information- We have a profile based alert that notifies our team when more than 200 files are modified at one time. Lately we've been getting the notification with the wrong User identified in the message. Such as: Message: User 'wrong user name' Created file/folder '\\servername03\mainfile\facilities\telephone\pay phones'. Modified by: wrong user name The "wrong user name" is actually my name - but I did not access the folder. Why would this be reporting my name instead of the user that actually accessed/modified 
- AD Audit Personalized logo- Hi there.  How can I change the ManageEngine ADAudit Plus logo to our corporate one.  We've purchased the software and would like to change this. Thanks. 
- Send Emails with High Priority Status?- We'd love it if we could have alert emails sent with "High Importance" status.  We typically set our mobile devices to only notify us of "high importance" flagged emails, and some alert emails would fall into that category for us. Thanks. 
- Failed change/delete requests?- Hi there, i am looking for a Report which tells me when and whom tried to delete an Computer Account even when it failed... The Logging on the Domain Controller is configured properly but i cant find this in adaudit. Anyone an idea? Kind regards 
- Ad Audit File audit - EMC Unity support- EMC Unity is not listed on supported platform page. Does is use same auditing framework as EMC VNX ? Is Unity on your roadmap ? 
- ADAudit+ Starting Service - AuthenticationService Failed- Dear Manageengine Team, We've installed ADAudit+ a while ago and it was working perfectly until today. Suddenly the services starts and stops a few seconds afterwards. What I see when I try to start the Service via startADAP.bat is the following: Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Users\svc.itm.daud>cd "c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin" c:\Program Files (x86)\ManageEngine\ADAudit Plus\bin>startADAP.bat "c:\Program Files 
- Scheduled charts- I would be very handy to be able to just scheduled charts of data such as 'Logon Failures' etc for wallboard's, manager etc. Stephen Fowles 3rd Line Support Technician North West Ambulance Service - NHS Trust 
- Agent- Is it possible not to install agent? Thanks 
- Cloud- Do you have any Azure or Amazon preinstalled images? Thanks 
- SaaS- Do you have SaaS version? Thanks. 
- SIEM solutions- ADAudit plan is SIEM solution? What is the difference between ADAudit Plus and EventLog Analyzer ? Thanks. 
- Large Database- Hi I have a problem with the database (SQL 2008 R2). The database grows and grows, above 85 GB. What can I do, to shrink the database? Kind Regards 
- Account Lockout Analyzer- I get this error on any users that with locked out accounts. I get no data on devices as well. A lot of our client are now devices like phones and apple ipads. I would like to track down devices by IP if I can't find them as windows machines. 
- Understanding Caller Machine Name- Hi AdTeam, I have question and need to understand about Caller Machine Name. I found 2 user locked out and when i see caller machine name is different. ie. Username      | Caller User Name | Caller Machine Name Cent Bro        | DC01$                | \\LAPTOP789 and other Username      | Caller User Name | Caller Machine Name Lara Cros       | DC01$                | LAPTOP123 My question is, what is different caller machine name with symbol "\\" and without symbol ? I need to find that cause of 
- AdAudit and Netapp Cdot 8.2- I recently purchased adauditplus and the netapp extension but it doesnt look like cdot 8.2 or 8.3 is supported?  Can you please let me know if it i supported and i am mistaken, or can you let me know when you might get this feature implemented. 
- Granular Exclusions for File Auditing- It seems like you can exclude an account from having it's file auditing events collected but ideally, you would be able to exude certain events from being collected on a per account basis. For example, I have a product that collects detailed file statistics from my large file server. At times, it needs to trawl shares and this generates a huge amount of read operations. I'd like to exclude these read events from being collected but collect any file deletions it might make or other changes.  
- Event source- What is the event source for ADAudit Plus ? Thanks 
- no reports showing on my adaudit plus- Hi Everyone, I have installed Adaudit plus recently on trail version , and I was getting users reports such as last log in failed for every users in my domain, recently I purchased a license and for 3 packages domain controllers  member servers file servers but after that I am unable to find any report related to my users login on the computers  iam not sure whether it's a technical issue or not do I need to buy workstations addons to check last failed login file audit etc..... please find the below 
- PostgresSQL server failed- I'm trying to upgrade an existing Win2008 ADAudit server and keep getting a information popup windows stating "Trying to start PostgresSQL sever failed at installation".  After which the ManageEngine service won't restart w/ a service-specific error Incorrect function.  Snapshot reversion fixed the second issue.  Suggestions for resolving the first issue so I can successfully upgrade? 
- Reports Display Service Account as User that has made the AD change.- Is there a way to make the reports show the user that has made the AD change? Our Reports display the service account as User that has made the AD change. Our Helpdesk team use AD Manager and are not Domain Admins. Any ideas? 
- BUG - Changin custom report privay from 'Just me' to Public fails on new interface- Fails on new interface as above. UI says it has completed successfully but the change does not take effect. If I switch back to old interface it allows me to change scope.  
- please help- in audit plus error  Successfully updated EMC Details Unable to contact EMC Control Station:Connection Refused  
- Service Won't Start - Issues after installing build 5000- Just installed Build 5000 and now the service wont't start. Windows event log shows: The ManageEngine ADAudit Plus service terminated with service-specific error Incorrect function. The wapper.log file shows STATUS | wrapper  | 2016/08/31 11:23:42 | Launching a JVM... INFO   | jvm 1    | 2016/08/31 11:23:42 | Unrecognized VM option 'ErrorFile=../logs/hs_err_pid%p.log' INFO   | jvm 1    | 2016/08/31 11:23:42 | Could not create the Java virtual machine. ERROR  | wrapper  | 2016/08/31 11:23:42 | JVM 
- File Audit not working- We are in the process of setting ADAudit Plus up in our environment. Yesterday I worked with support for a while and they indicated that group policy was not setting the audit policies correctly on the server. I finally figured out that a setting in the ADAuditPlus group policy that the software created had to be changed and then it started auditing events. My problem now is that some file\folder actions appear to register with the console and some do not. I have only 1 share, which is a test share, that 
- How to change destination folder- Hello, Please help, i just can't figure out how to change the destination folder for adaudit plus backups and logs. they are filling my drive quickly. thank you in advance. 
- ADAudit Plus options- We are currently licensed for a certain number of DC's but I wanted to ask if the ADAudit plus tool will audit Disk space on DC's and member servers? I realize those are member server licenses that we would need to purchase but just wanted to ask. Thanks, Matt 
- Archive events- Hi team, I have installed DC on the one server and ADAudit Plus on the other one joined to the domain. The ADAudit Plus service is running under domain admin account. I'm testing the trial version, I have configured the Archive Events to 1 day. The problem is I still don't see the archived files in the Archive Folder by default. Any help will be good. Thanks. 
- Include 'Pre-Windows 2000 Name' attribute in reports- Hi guys, please consider including the 'pre-windows 2000 name' in reports and data collection. This would be very useful to us in our reports.  
- 8007000eERROR_MESSAGE- Failure while collecting event log data - ADAudit Plus [07:52:26:904]|[09-12-2016]|[ADSMLogger]|[INFO]|[125]: WMI ERROR -> key is ServerNameerror values = {ERROR_SEVERITY : SEVEREERROR_CODE : 8007000eERROR_MESSAGE : Not enough storage is available to complete this operation. }, | Server configuration: Server is used only for ADAudit Plus Win2012R2 RAM 8Gb Free disk space 14 Gb Any suggestions? 
- Change certificate- Hi, I would like to change the default certificate used when https is used in ADAudit Plus. Does anyone know how to do this? Regards Markus 
- RegExp matching for file/folder exclusions- As per this thread https://forums.manageengine.com/topic/do-the-product-team-review-the-ideas-section it appears the regular expression matching for file/folder exclusions was added to the product? Can you give some examples? 
- ManageEngine ADAudit Plus gets mentioned in Gartner's MQ report.- Dear Customers,   The much awaited Gartner MQ report is out and we've made it! The industry's leading analyst firm Gartner Inc. has released their Magic Quadrant for SIEM and Critical Capabilities report lately. This awesome news is proof of our continuous effort to provide our customers a simple, efficient, and cost -effective security solution.     In the report, Gartner highlights several strengths of ADAudit Plus, comprehensive logging and auditing capability for organizations and lot more. Read 
- User's logged into multiple computers - Alert- Hello Team, We're using ADAudit Plus 5 [4693] and we would like to configure an alert for user's logged into multiples workstation, I mean workstation on differents countrys or  is logged on 5 workstation in same time. We are trying to detect if a user shared his user account or irrelagar situations. How can we do it? Kind regards, Pedro 
- Ability to Copy Report Profiles- Please add the ability to copy report profiles 
- Next Page