Quantcast
Channel: Support Portal
Viewing all 484 articles
Browse latest View live

Re : Managed Service Account

$
0
0
Paul,

I'm sure ADAudit Plus can work very well with 'Managed Service Accounts' and it won't give any trouble upon reboot unless there's any discrepancy in the credentials. 

We can organize a remote session to watch over the scene in live. Please send an email to support@adauditplus.com with your contact number. 

Regards,
Bruce
ADAudit Plus Team

Configuring SQL HA Listener

$
0
0
Hi guys,

Does ADAudit+ supports SQL HA Listener?

At the moment when we failed over to the second database, obviously AAP stopped working.

Thanks

Re : Error Code 6be

$
0
0
Hello Bruce,

It isn't a random occurring error here.
The DCs are set to check once every hour.
There is this one DC which is able to collect 3 times, but the 4th time fails.
Every 4th time.

Still, I've changed the event fetching method for this server, like you suggested.
But guess what: It still gave the error the 4th time it tried to collect the events (and as always, the first 3 times it tried to collect went okay)...


Kind regards,

C. van den Bosch
System Administrator
Teleena Holding bv

Re : Error Code 6be

$
0
0
If it occurs very often and lasts extensively, we might need to analyze the root cause through the log files. Please have them compressed and uploaded through below link,


Location: <Installation-Dir>\ADAudit Plus\logs

Regards,
Bruce
ADAudit Plus Team

Alert for rdp logon success for servers

$
0
0
How would I go about creating an alert to be notified when anyone successfully RDP's into my Windows servers? and also an alert for failed attempts trying to log into my servers.

Re : Configuring SQL HA Listener

$
0
0
Is ADAudit Plus database in clustered SQL or Do you have HA configured in two standalone servers ?

Regards,
Bruce
ADAudit Plus Team

Re : Alert for rdp logon success for servers

$
0
0
Please follow the procedure given below,

1. Go to Alerts tab -> New Alert profile
2. Enter a name, description and select the severity
3. Under 'Report profile' dialog box, Click on + and select 'Local Logon Success for DCs' under 'Local Logon/Logoff' category (profile works good for all configured machines)
4. Check 'Advanced configuration' and then 'Filter' and click on 'Add Filter'
5. Add the filters as follows,

            Logon Type -- Equals -- 10
AND  Where -- Equals -- <Click in the text box and choose appropriate machines>

6. Save the alert profile

Hope it helps. 

Regards,
Bruce
ADAudit Plus Team

Re : Configuring SQL HA Listener

$
0
0
Its HA configured in two standalone servers.

I changed the database config file to point to the HA listener and it works.

ChangeDB.bat should have this option to change from a single DB to a HA listener.

stop the service, go to <installation directory>\ADAudit Plus\conf\database_params.conf - point to the HA listener and remove the instance. Start service.

Re : Alert for rdp logon success for servers

$
0
0
exactly what I needed.  thank you!

Re : Audit Local Administrator Password Solution(LAPS).

$
0
0
Interested in an answer for this question as well. I can read a LAPS password using the LAPS UI and with the required auditing enabled, a 4662 Event ID is generated on the DC, but I don't see anything populating into the report in ADAudit after following the steps above.

Re : Configuring SQL HA Listener

$
0
0
Thanks for the note. We'll have it incorporated soon. 

Regards
Bruce

Re : Audit Local Administrator Password Solution(LAPS).

$
0
0
Please be noted that in current version of ADAudit Plus having 'LAPS Password Read' report, We could only find when someone reads the attribute associated with LAPS for any corresponding account. We are working on enhancing the module with additional capabilities. In order to capture the event ID 4662 relevant to 'LAPS-password read' action, we need to prepare the AD servers for the existence of the same. Please click on above link for reference. 

Regards,
Bruce
ADAudit Plus Team

 

Re : Firewall Ports that need to be opened between ADAudit Plus and the Domain Controller.

$
0
0
Hi Guna,

When I run check port with DMZ PORT ANALYZER  , It don't list Dynamic port number.

How can i get Dynamic port

Thanks

Real time for member servers?

$
0
0
Hello we are evaluating AD Audit Plus and looking for real time event information for our RADIUS servers.  I see there an option to do real time for the domain controllers but not the member servers.  Is there an option for this im missing?

Re : Firewall Ports that need to be opened between ADAudit Plus and the Domain Controller.


Problem after MySQL to MSSQL migration

$
0
0
Hi! We migrate to MSSQL from MySQL.
All historical data shows fine, but new events not injecting to base.
If we revert back to MySQL, new events injecting.
And second problem with Cirilic OUs and CN.
Look like this


On MySQL all Cirilic symbols showing fine.

Re : Real time for member servers?

$
0
0
I'm afraid we wouldn't be able to configure 'Real time' event collection for Member servers (RADIUS servers) in ADAudit Plus as 'Real time' event fetch is supported only for DCs as of now. 

Regards,
Bruce
ADAudit Plus Team

Re : Problem after MySQL to MSSQL migration

New Script Based Alert Action

$
0
0
Guys, I see in build 5040/5041 you have added the option to fire a script on an alert! This is something I have wanted/asked for for a long time so I am delighted to see that it's made it into the product. Is there any documentation on this feature i..e what script types are allowed (VBScript, powershell etc)  and what variables can be passed to that script?

Re : New Script Based Alert Action

$
0
0

Hi Shocko,

 

Greetings from ADAudit Plus,

 

The supported scripts are powershell, vbscript, executables and batch.

 

Syntax for "Script Location" :

 

Powershell script:

powershell.exe <Script_path> <Event_variables>

Example: powershell.exe C:\Users\administrator\Desktop\alert_test_scripts\test.ps1 "%USERNAME%"

 

VBScript script:

wscript/script <Script_path> <Event_variables>

Example: wscript C:\Users\administrator\Desktop\alert_test_scripts\test.vbs "%USERNAME%"

 

Batch script:

<Script_path> <Event_variables>

C:\Users\administrator\Desktop\alert_test_scripts\test.bat "%USERNAME%"

 

<Script_path>        - Full path to the Script.

<Event_variables> - They are parameters to be passed as command line arguments to the script. Use the "Add" button to add them to the command.

 

The complete list of variables is available at,  https://www.manageengine.com/products/active-directory-audit/help/alerts/alert-variables.html

 

Note: The use of <event_variables> is optional.


 

We are working on the documentation, will keep you posted on it.

 

Regards,

Akshay Vyas

Viewing all 484 articles
Browse latest View live