Quantcast
Channel: Support Portal
Viewing all 484 articles
Browse latest View live

Re : Invalid Licence

$
0
0
Please apply the patch given below and observe the situation.


Steps to apply the patch:

1. Stop ADAudit Plus service/console
2. Rename following files under <Installation_dir>\lib
      petinfo.dat, product.dat, free.xml and AdventnetLicense.xml (E.g.petinfo.dat_old, product.dat_old)
3. Download the patch, extract and replace the above mentioned files
4. Start the service and now apply the new license file

Regards,
ADAudit Plus Team

Printer Audit Reports- Some work, others don't

$
0
0
Good Day All,

I'm experiencing an issue with the Printer Audit Reports. 

In a nutshell, some printers are reporting perfectly while others don't report at all. 
I'm assuming that ME picks up its logs from Event Viewer, in which I can track down jobs from the non-working printers.

Any ideas why this is doing this?

Re : Printer Audit Reports- Some work, others don't

$
0
0
There are a couple of scenarios which could have caused this situation. It would be easier to analyze the case on a remote session as it seems to be working for some of the printers. ADAudit Plus collects the information about print activities through print spooler logs. Please send an email to support@adauditplus.com so that we would analyze the case.

Regards,
ADAudit Plus Team

Re : Printer Audit Reports- Some work, others don't

$
0
0
Hi Bruce,

We managed to sort out the issue by contacting ManageEngine via phone and sorting it with them. We needed to update ME as apparently it was a known issue on the version we were using.

Thanks for the reply.

EMC and NetApp state reports

$
0
0
Hello guys,
before evaluating the product, i need your advice on following:

i know that there are reports with states(not only changes) for Windows-based file servers, but does the product have state reports for EMC and NetApp file servers?

+ Does ME support DataOntap with state reports?



Thank you in advance,
Aleksey.

File Server Reports

$
0
0

Afternoon everyone.


I dont know if this is possible and if it is whether it is a defualt report, but I was looking to run a report on the permissions on a folder/sub-folders below?

is this possible?


Wayne

Re : EMC and NetApp state reports

Re : File Server Reports


Default SACL does not track permission changes to files

$
0
0
It seems the default SCAL only tracks permission changes to folders and not to individual files. Was this a design decision? 

Connect to SIEM or Big Data System?

$
0
0

Hey AD Audit Plus Team,

any news on the integration of AD Audit events to log into some kind of SIEM or Big Data System?

It was asked for often in the last years and due to higher intrest in centralized security reporting in companys i'ld love to see that feature in future releases.

Or is there a timeline yet?


Thanks

Alex

Re : Connect to SIEM or Big Data System?

$
0
0
Please let us know which SIEM or any other central repository you've been using in your environment. In fact, We're currently working on a feature to parse events to an SIEM from ADAudit Plus. We'd keep you posted. 

Notification when Passwords are going to expire soon?

$
0
0
I am currently evaluating ADAuditPlus and was wondering how I can set up a report or an alert to give us a heads up on what users' passwords are going to expire soon. It would be nice to send out an email to that user with a 2 weeks notice and a follow up with a 1 week notice, to give them a heads up to change their password soon.

I see this functionality is ADSelfService, but there has to be a way to do this in ADAuditPlus since the password policies are all set through the AD. I just can't find it.

Also, why does ManageEngine make so many competing products that do minimal tasks, instead of making two or three solid product suites that deliver multifaceted functionality? They make things like FileAudit Plus, when both ADAuditPlus and EventLogAnalyzer can both monitor file changes, creations, deletions etc. What is the benefit to delivering pieces of software to people?

Re : Connect to SIEM or Big Data System?

$
0
0

Thanks for enthusing me with your reply :-)

I'm using ArcSight ESM so the logs have to be in CEF if possible for ArcSight to develop a Connector fast. But in general there just has to be a file or accessable table with the events. To be compatible with other SIEM/BigData like Splunk i think it would be best to implement a syslog push.

On the other hand its possible to get all WindowsEvents from the servers itself, but i dont want to rebuild the great intelligence of Audit Plus. Its just the "negative" events like a FIM violation for example that i want to use in the SIEM.

For more details or questions just send me a mail. Than we can discuss on a detailed level. I dont want to leak details about my security infrastructure as you may understand.

Thanks again!

Alex

Re : Connect to SIEM or Big Data System?

$
0
0
That seems to be a nice idea to implement the feature within ADAudit Plus. You can send an email to support@adauditplus.com for further correspondences to keep the case on track confidentially. 

Regards,
ADAudit Plus Team

Re : Notification when Passwords are going to expire soon?

$
0
0
ADAudit Plus fetches security log events from configured DCs, store them in the internal database and produce them as user friendly reports/send email notification. It does not query any live information of attributes for any object which is a legitimate way to report/alert on password expiry which wouldn't be possible in ADAudit Plus. 

Password expiry notifier is an important aspect of ADSelf Service Plus  which notifies the account owner whose password are about to expire. This 'Password Expiry notifier' tool is now 100% FREE allowing you to notify unlimited users in your organization about their password expiry.


Regards,
ADAudit Plus Team

Re : Do the product team review the Ideas Section?

$
0
0
Hi Shocko,

The following list of features have been released in our version 5.0(Build Number: 5000)
  • Set default time period - released in Build 4693
  • Copy custom reports
  • Filters Based on Account Exclusion rather Than Inclusion-in Alert Profiles
We really appreciate your help/ideas in getting these included in the product.


Re : Default SACL does not track permission changes to files

$
0
0
We would test the concept on various scenarios and have the document updated if necessary. 

Service Won't Start - Issues after installing build 5000

$
0
0
Just installed Build 5000 and now the service wont't start. Windows event log shows:

  • The ManageEngine ADAudit Plus service terminated with service-specific error Incorrect function.
The wapper.log file shows

STATUS | wrapper  | 2016/08/31 11:23:42 | Launching a JVM...
INFO   | jvm 1    | 2016/08/31 11:23:42 | Unrecognized VM option 'ErrorFile=../logs/hs_err_pid%p.log'
INFO   | jvm 1    | 2016/08/31 11:23:42 | Could not create the Java virtual machine.
ERROR  | wrapper  | 2016/08/31 11:23:42 | JVM exited while loading the application.

The service is configured to use the following command line:

"C:\Program Files (x86)\ManageEngine\ADAudit Plus\bin\wrapper.exe" -s "C:\Program Files (x86)\ManageEngine\ADAudit Plus\conf\wrapper.conf"

Config line in quesiton is

wrapper.java.additional.20=-XX:ErrorFile=../logs/hs_err_pid%p.log



Re : Service Won't Start - Issues after installing build 5000

$
0
0
OK, found the issue. For some reason the installer created a folder called jre_new which contains the new Jre that will recognize the new -XX options and new class libraries. However, the wrapper.conf file still references the folder called jre and hence is using the old Jre form the build pre 5000. I simply renamed Jre to Jre_old and Jre_new to Jre and all working now. 

This would seem like a big flaw in the installer. Surely it should simply rename the existing jre folder at install time to jre_old no ??

Re : Do the product team review the Ideas Section?

$
0
0
Awesome! Just installed build 5000. The copy custom reports options looks great as I have some 300 reports. Very useful. 
Viewing all 484 articles
Browse latest View live