Objective 

To set up alerts in ADAudit Plus for scenarios where disabled user accounts are re-enabled.

 Prerequisites 

• You must have administrator access or a technician account with permissions to create and modify alert profiles.

• Email and SMS settings are configured in ADAudit Plus if notifications are required.

• Ticketing integration is set up if you plan to create tickets automatically.

 Steps to follow 

1. Log in to the ADAudit Plus web console using an account with sufficient privileges.
   
2. Navigate to the Alerts tab.

3. Click New Alert Profile in the top-right corner.
   

4. Enter a relevant name and description for the alert profile.

5. Click the + icon in the Report Profiles field.

6. Under Domain, select the on-premises domain.

7. In the Category drop-down, choose User Modification.

8. Search for and select the Enabled Users report profile and click OK.

9. Update the alert message if needed to match your requirements.

10. Expand Advanced Configuration to apply additional filtering and thresholds.

11. Enable the Filter option.

12. Click Add filter and set the following:

1. Attribute: Username

2. Operator: Equals

3. Value: (&(objectCategory=person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=2))

13. In the Alert Actions section, enable E-mail Notification.

14. Enter the recipient email addresses where the alerts should be sent.

15. Provide a clear subject line for the notification.

16. Select the preferred email format, either HTML or plain text.

17. Choose the details to include in the alert email, such as:

1. Alert message

2. Alert profile name

3. Event details

18. Enable Throttle Notification if you want to group multiple similar alerts into a single notification within a defined time window.

19. If SMS notifications are needed and the SMS provider settings are configured under Admin > General settings > Server Settings > SMS, enable SMS Notification.

20. Enable Execute Script if you want to trigger an automated script when this alert is generated.

21. If a ticketing tool is integrated via Admin > Configuration > Ticketing System Integration, enable Configure Auto Ticketing to automatically create tickets when alerts occur.

22. Enable Throttle ticket generation to group related alerts into a single ticket.

23. Click Save to activate the alert profile.

 Validation and confirmation 

• Trigger a test scenario by re-enabling a disabled user account.
  
• Confirm that the configured alert is generated and notifications or tickets are created as expected.
  

 Tips 

• Use descriptive names for alert profiles to simplify management.

• Apply filters carefully to avoid unnecessary alerts.

• Test notifications and scripts in a controlled environment before applying them in production.

 Related topics and articles 

• How to set an alert for users with password never expire enabled