Alert
How to configure an alert for service principal creation in Entra ID
In this article: Objective Prerequisites Steps to follow Validation and confirmation Tips Related topics and articles Objective Learn how to configure an alert that notifies administrators whenever a new service principal is created in Entra ID, ...
How to configure an alert for monitoring changes to specific files or folders
Objective To guide users through the process of creating an alert in ADAudit Plus that notifies them whenever specific files or folders are modified, accessed, created, deleted, moved or renamed ensuring proactive monitoring and quick response to ...
How to set up alerts to monitor both domain authentication and workstation logon events for specific users or groups
Objective This article explains how to configure ADAudit Plus alert profiles to monitor successful domain authentication events (Event ID 4768) and local logon events (Event ID 4624) performed by specific users or groups. By setting up these alerts, ...
How to create an alert profile for tracking login attempts by specific users or groups
Objective This article explains how to create an alert profile in ADAudit Plus to monitor and notify administrators whenever specific users or groups successfully log in. The alert can be configured for both Domain Controller authentication events ...
Unable to receive alerts
Issue description Alerts may not be received in ADAudit Plus due to various configuration or system issues. This document outlines the possible causes, troubleshooting steps, and resolutions to ensure alert delivery. Possible causes Alert Profile ...
How to receive notifications when licenses are assigned or removed from user accounts
Objective To guide users in configuring an alert that notifies administrators whenever a license is assigned or removed from a user account in Entra ID, this enables better tracking of license usage, compliance, and potential unauthorized changes. ...
Why am I not seeing any data in the DNS Changes reports?
Issue description In ADAudit Plus, the DNS Changes reports profile provides insights into DNS record changes, including addition, removal, and modifications of DNS Node and DNS Zones within the Active Directory environment. However, in some ...
How to configure an alert to notify when a password is reset for a user
Objective Learn with step-by-step instructions how to set up an alert in ADAudit Plus that notifies administrators when a user’s password is reset to ensure account security and enable timely response to unauthorized changes. Prerequisites You need ...
How to update email address in the existing alert profile
Objective This article explains how to update the email address in an alert profile within ADAudit Plus. Prerequisites Access to the ADAudit Plus console. Administrator role or a technician account with sufficient privileges to view and modify alert ...
How to configure an alert to notify when password is reset for a user
Objective Learn with step-by-step instructions how to set up an alert in ADAudit Plus that notifies administrators when a user’s password is reset to ensure account security and enable timely response to unauthorized changes. Prerequisites You need ...
How to configure an alert to notify for new OU creation
Objective To set up an alert in ADAudit Plus that automatically notifies administrators whenever an OU is created in Active Directory, helping ensure prompt awareness of critical changes. Prerequisites You need access to the ADAudit Plus web console. ...
How to configure an alert to notify for Computer Deletion from the AD
Objective This page will guide administrators through the process of configuring an alert in ADAudit Plus that notifies designated users when a computer object is deleted from Active Directory (AD), enabling prompt action and ensuring security ...
How to configure an alert to notify when password is changed for a user
Objective To guide administrators through the process of configuring an alert in ADAudit Plus that notifies them whenever a user’s password is changed, enabling proactive monitoring and rapid response to potential security risks. Prerequisites Have ...
How to configure an alert to notify when a user is disabled in Entra ID
Objective To provide step-by-step guidance on configuring an alert that notifies administrators whenever a user account is disabled in Entra ID (formerly Azure Active Directory), ensuring timely awareness of critical identity status changes. ...
How to configure an alert to notify when MFA is enabled
Objective To guide users through the process of configuring an alert in ADAudit Plus to receive notifications whenever MFA is enabled for any user account in the Microsoft Entra ID. Prerequisites Access to the ADAudit Plus web console. A user account ...
How to configure an alert to notify when MFA is disabled
Objective To provide step-by-step guidance on configuring an alert that notifies administrators whenever a user account is disabled in Entra ID (formerly Azure Active Directory), ensuring timely awareness of critical identity status changes. ...
How to configure an alert for sign-in attempts using disabled accounts in Entra ID
Objective To provide step-by-step guidance on configuring an alert that notifies administrators when a sign-in attempt is made using a disabled account in Entra ID, enabling early detection of unauthorized access attempts or misconfigured account ...
How to configure an alert when a user account is locked
Objective Learn how to configure an alert that notifies administrators whenever a user account is enabled in Entra ID (formerly Azure Active Directory), ensuring timely awareness of critical identity status changes. Prerequisites Access to the ...
How to detect and get alerted to logins from anonymized IP addresses in Entra ID
Objective This article guides you through the process of detecting and configuring alerts for login attempts originating from anonymized IP addresses in Entra ID. This helps you identify potentially suspicious login activities that may indicate ...
How to configure an alert to notify admins when MFA authentication methods are modified
Objective To guide users in setting up an alert that notifies administrators whenever multi-factor authentication (MFA) methods are added, removed, or modified for any user in Microsoft Entra ID, ensuring timely detection of changes that could impact ...
How to configure an alert to notify admins when a security group is created in Microsoft Entra ID
Objective To provide step-by-step instructions for configuring an alert that notifies administrators whenever a new security group is created in Microsoft Entra ID, enabling proactive monitoring of group management activities for security and ...
How to set up alerts for password resets in Microsoft Entra ID
Objective To guide users through the process of configuring an alert that notifies administrators whenever a user's password is reset in Microsoft Entra ID, ensuring timely visibility into potential security-sensitive events and administrative ...
How to get an alert if a GPO is modified
Objective This article explains how to configure an alert in ManageEngine ADAudit Plus to notify administrators whenever a Group Policy Object (GPO) is modified. Monitoring GPO changes is essential for ensuring Group Policy integrity, detecting ...
How can I get an alert whenever a user account is set to "Password Never Expires"?
Objective This article explains how to configure an alert in ManageEngine ADAudit Plus to detect and notify administrators when the Password Never Expires setting is enabled for any Active Directory user account. Monitoring this change is critical ...
How to create an alert in ADAudit Plus
Objective To create an alert in ADAudit Plus that notifies administrators about specific activities or changes in Active Directory, Windows servers, workstations, or file servers, enabling timely response to security events and compliance ...
How to create an alert for administrative account lockouts
Objective This article explains how to configure a real-time alert in ADAudit Plus that will notify you immediately when a user account belonging to a sensitive administrative group is locked out. Prerequisites You must have access to the ADAudit ...
How to create an alert for password resets on administrative or executive accounts
Objective This article explains how to configure a real-time alert in ADAudit Plus that will notify you whenever a password is reset for a user account belonging to a sensitive group, such as an administrative or executive group. Prerequisites You ...
How to set up alerts for disabled users being re-enabled
Objective To set up alerts in ADAudit Plus for scenarios where disabled user accounts are re-enabled. Prerequisites You must have administrator access or a technician account with permissions to create and modify alert profiles. Email and SMS ...
How to configure an alert to notify you about OU deletion
Objective To set up an alert in ADAudit Plus that automatically notifies administrators whenever an organizational unit (OU) is deleted in Active Directory, helping ensure prompt awareness of critical changes. Prerequisites You must have access to ...
How to check users' first and last logons to computers
Objective This article explains how to access the Users First and Last Logon By Computers report in ADAudit Plus. This report helps administrators track the initial and most recent logon times of users on specific computers within the domain. ...
How to create an alert for interactive logons on domain controllers
Objective This article explains how to configure a real-time alert in ADAudit Plus to notify you of both successful and failed interactive logon attempts to your domain controllers (DCs). An interactive logon occurs when a user logs in directly at ...
How to create an alert for Remote Desktop logon attempts to domain controllers
Objective This article explains how to configure a real-time alert in ADAudit Plus to notify you of both successful and failed Remote Desktop (Remote Interactive) logon attempts to your domain controllers (DCs). Prerequisites You must have access to ...
How to create an alert for user accounts created outside business hours
Objective This article explains how to configure a real-time alert in ADAudit Plus that will notify you whenever a new user account is created in Active Directory outside of your organization's standard business hours. Prerequisites You must have ...
How to create an alert for non-administrator logons to a domain controller
Objective Get step-by-step instructions for configuring an alert in ADAudit Plus that will notify you in real time when a user who is not a member of a privileged administrative group successfully logs on to a domain controller. Prerequisites Access ...
How to detect privilege escalations using ADAudit Plus
Objective This article explains how to configure a real-time alert in ManageEngine ADAudit Plus to notify administrators whenever a user is added to a privileged Active Directory group, such as Domain Admins. Prerequisites You must have access to the ...
How to create an alert for permission changes on critical shares
Objective This article explains how to configure a real-time alert in ADAudit Plus to notify administrators whenever permissions are modified on specific, critical file shares. Prerequisites You must have access to the ADAudit Plus web console with ...
How to create an alert for when a gMSA is created
Objective This article explains how to configure an alert in ManageEngine ADAudit Plus to notify administrators when a Group Managed Service Account (gMSA) is created in Active Directory. Monitoring gMSA creation enhances visibility into service ...
How to create an alert to notify for conditional policy created in Azure
Objective This article outlines the steps to configure an alert in ManageEngine ADAudit Plus that notifies administrators whenever a new conditional access policy is created in Azure Active Directory. This enhances visibility into access control ...
How to create an alert to notify for conditional policy modified in Azure
Objective This article describes how to set up an alert in ManageEngine ADAudit Plus to notify administrators when a Conditional Access Policy is modified in Azure Active Directory. It enables real-time visibility into changes affecting access ...
How to create an alert if a user attribute is modified
Objective This article explains how to create an alert in ADAudit Plus to monitor and notify users when a user attribute is modified. Prerequisites Access to the ADAudit Plus web console. A user account with administrator privileges or a technician ...
Next page