Objective

This article guides you through the process of creating a custom report in ADAudit Plus to monitor changes to Group Managed Service Accounts (gMSA).

Prerequisites

• The account used to configure the report must have admin privileges in ADAudit Plus.

• Ensure audit policies and object level auditing are enabled for AD object modifications.

Steps to follow

1. Log in to the ADAudit Plus web console as an administrator or with a technician account with delegated permissions to create or modify a custom report.
   
2. Go to Analytics, select Custom Report, and click Create Custom Report.

3. Enter an appropriate name along with a relevant description.(for example, gMSA Modification Tracker)

4. Select the desired report type based on your requirements.

1. Tabular View: Displays data in a simple table format (graph is optional).

2. Graphical View: Presents data using various chart types for visual analysis.

3. Summary View: Shows grouped data with subtotals for easier interpretation.

4. Pivot View: Summarizes data in a grid format with both horizontal and vertical.

5. Under Select Report Category, choose: AD Objects.

6. In the Sub Module, select: Other AD Object Changes.
   

7. Click Next.

8. Choose the columns you want to display in the custom report.

9. If you want to include a chart in the custom report, expand the Charts section, then select the Graph Type, specify how you want to display the data by modifying the Group by (X-axis).

10. Expand the Filters section and click Add Filters to customize the report criteria.

1. Attribute: Target Object Class

2. Operator: Equals

3. Value: msDS-GroupManagedServiceAccount

11. Expand the Scheduler section and set the desired frequency for generating the report. If you'd like the custom report to be emailed each time the schedule runs, enable the Email this scheduled Report option.

12. You can also set the privacy of the custom report to define who can view it, choosing between public or private.

13. Finally, select the folder in ADAudit Plus where you want the report to be saved.

14. Save the report.

Validation and confirmation

• Go back to the Custom Reports list and select your newly created report.
  
• Verify that it displays any changes made to gMSA objects, such as creation, modification, or deletion.
  

Tips

• Ensure Object Level Auditing and audit policies are enabled on the domain controllers.

• Schedule the report or set up alerts for real-time monitoring if needed.

Related topics and articles

• How to create a custom report in ADAudit Plus