none
Active Directory RRS feed

  • Question

  • Hi Team,

    I have few queries mentioned below. Kindly share me your suggestion.

    1) how can we make sure that time is getting synchronized properly in AD infrastructure and how to monitor this?

    2) Is there anyway to find which attribute got changed recently of object ?

    Regards

    Sajin P S

    Wednesday, October 29, 2014 3:31 PM

All replies

  • Hi,

    I think this is not the correct place for this question, try to post this in the Directory Service forum.

    In short:

    Setup your forst root domain PDC emulator FSMO server to get time from external source.

    All other PDCs will automaticly sync time with the forest root domain PDC.

    All other Servers and Client will then sync time with that subordinate PDCs.

    Normaly there is no need to monitor this, but you will get event log entries if time differs to much.

    For object changes you can enable audit policies in GPOs to have changes in security event log, but there may be a lot of data if you do so. May have a look at the Audit Collection Service (ACS)

    Regards
    Peter


    Peter Stapf - ExpertCircle GmbH - My blog: JustIDM.wordpress.com

    Thursday, October 30, 2014 7:17 PM