none
AD monitoring software RRS feed

  • Question

  • Hello,

    I am looking for a software that will be able to keep track and receive alerts when changes are made in AD.

    Need a recommendation from somebody who uses/has an experience with such software.

    Thanks.

    Michael.


    "When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

    Wednesday, January 22, 2014 4:07 PM

Answers

All replies

  • I know that there are at least 2 products in the market:

    Quest "ChangeAuditor" (previously Intrust)
    BeyondTrust "PowerBroker"

    I dont know what alerting mechanisms both have when you dont use Microsoft SCOM. Sending a mail is possible, AFAIK.

    Just one thing, I dont know both in detail:
    I know that Powerbroker has auditing and object recovery integrated: If you backup your domain (= all the objects within) every Sunday you could restore an object as it was lets see last Wednesday with all the changes between Sun and Wed.
    Quest cannot do this, it only can restore the object as it was backuped.

    HTH

    Walter

    Wednesday, January 22, 2014 6:47 PM
  • Microsoft SCOM


    Santhosh Sivarajan | Houston, TX | www.sivarajan.com
    ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA

    Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012

    Blogs: Blogs
    Twitter: Twitter
    LinkedIn: LinkedIn
    Facebook: Facebook

    Microsoft Virtual Academy: Microsoft Virtual Academy

    This posting is provided AS IS with no warranties, and confers no rights.

    Wednesday, January 22, 2014 7:47 PM
    Moderator
  • Powershell is a good option..

    See this link.. he has done it using powershell...

    http://dexterposh.blogspot.com/2014/01/powershell-monitor-ad-group-membership.html


    ----Please vote if this is helpful----- -----Knowledge is Power-------- Ajo Abraham [MCP] [MCTS]

    Wednesday, January 22, 2014 8:03 PM
  • I have used SCOM(System center operations manager) to monitor AD. The benefit of SCOM is ability to define the baseline according to requirement & provides you real time alert. You got a management pack which defines various threshold parameters, along with it you can also customize or define your own sql query.

    http://technet.microsoft.com/en-us/library/hh212829.aspx

    Spotlight from Quest is another one.

    http://www.quest.com/spotlight-on-active-directory-pack/


    Awinish Vishwakarma - MVP

    My Blog: awinish.wordpress.com

    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

    • Marked as answer by pob579 Friday, January 24, 2014 2:39 PM
    Thursday, January 23, 2014 3:50 AM
    Moderator
  • Powershell is a good option..

    See this link.. he has done it using powershell...

    http://dexterposh.blogspot.com/2014/01/powershell-monitor-ad-group-membership.html


    ----Please vote if this is helpful----- -----Knowledge is Power-------- Ajo Abraham [MCP] [MCTS]

    Thanks Ajo,

    Yeah that blog is mine.....If you have any queries or need help..drop a comment there :)

    Knowledge is Power{Shell}. [pscustomobject]$DexterPOSH = [ordered]@{Name="Dexter";Certifications="MCTS,MCP";Blog="http://dexterposh.blogspot.com"}

    Thursday, January 23, 2014 4:17 AM
  • Thanks to all !

    Each answer has a value.

    Since there is no option "Helpful answer" I marked one as the Answer. I am using SSCM so OM is in the same product group.

    Sure I will check all proposed options.


    "When you hit a wrong note it's the next note that makes it good or bad". Miles Davis

    Friday, January 24, 2014 2:42 PM