Hi all,
I've been working through an eval of ADAudit Plus for a client that wants insight into AD changes in their environment.
I seem to have had good success setting it up with the provided documentation.
I am however running in to a problem with the OU Management/GPO Management reports. They aren't showing any information even though I've made AD changes to test them specifically. They are continuing to show no data available, even after several days of testing and configuring.
I have ensured that "Directory Service Access" - "Success" is set on the domain controllers I'm making a change on, as well as working through and setting the SACL's for GPO/OU Objects. I believe I've set the SACL's correctly though the verbage in the instructions is a little different than 2012R2.
I've also installed GPMC on the ADAudit Plus server, and am getting some information out of Advanced GPO Reports. The modified time, GPO name and summary are showing but the specific domain controller and who it was modified by are not.
I am monitoring the domain controllers in real time, I've checked the local GPedit.msc to ensure that auditing is actually being applied, and I'm still not finding a reason why I'm not getting the information I expect.
Does anyone have any advice or an idea of where to check?
Thanks for any help you can provide!