locked
Audit logging RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Does SCOM administrator actions get logged?

    How to activate this and where is it logged?

    Thanks.

    Regards Peter

    Friday, June 8, 2018 7:14 AM

Answers

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi!

    As far as I know SCOM does not natively include application-level role security reporting as you describe. Such a feature has been asked for in the past but never added to the product as far as I know.

    There's a blog post regarding this though, you could have a look at it on the link below:

    https://michelkamp.wordpress.com/category/auditing/

    Best regards,
    Leon

    Blog: https://thesystemcenterblog.com  LinkedIn:   

    Friday, June 8, 2018 7:25 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    As far as I know, there is no that kind of logging feature.
    Workaround solution may be refer to Michel blog
    https://michelkamp.wordpress.com/category/auditing/
    Roger

    Friday, June 8, 2018 7:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks for the response.

    I was think that can User Access Logging (UAL) which is enabled by default capture the events that happens by admin or other users?

    Thanks

    Regards Peter

    Friday, June 8, 2018 8:44 AM
  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi PeterCCS,

    User Access Logging (UAL) is feature in Windows Server that aggregates client usage data by role and products on a local server. It helps Windows server administrators quantify requests from client computers for roles and services on a local server.

    https://docs.microsoft.com/en-us/windows-server/administration/user-access-logging/get-started-with-user-access-logging

    OpsMgr doesn't have any 'self-auditing' features.

    The suggestion from Leon and System Center guy is very useful.

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by GouravIN Tuesday, June 12, 2018 5:35 AM
    Monday, June 11, 2018 8:27 AM