Remote Desktop Gateway Server audit
How do I setup Remote Desktop Gateway Server audit in the newest version? Thanks!
AdAudit API
Is there any API for AdAudit plus ?
SSL certificate
Hi, We want to replace the SSL certificate on the server. How can we do this? Thanks.
Error: EventData has more than 2GB so need to disable eventcollection
We Recently started seeing this message for 2 of our DCs EventData has more than 2GB so need to disable eventcollection In addition to this message the ADAuditPLus server appears to be consistently bogged down, CPU wise. We have two DCs in the domain
ADAudit Plus File Server Report
Hello; Is it possible to get a report for file server the files not opened(or accessed) for a specific time. For example the files not opened for 1 year. There is File Read Access option under File Audit=>File Audit Reports=>File Read Access but I need
Deletion of old archive files
Hi there, In looking to "spring clean" our ADAP server before migration to a VM, I've realised that the archives of old events go back to the initial setup of the server several years ago. Is it safe to just delete the archived zip files, and will the
ADAudit server migration procedure
Hello, I’m migrating a client's ADAudit Plus installation from their current server to a new one with an updated operating system (windows server 2019/2022) and I need to confirm the procedure to accomplish this migration. In summary, my execution plan
ADAudit Plus Roadmap - 2022/2023
Hi there, Is there a roadmap for the product ADAudit Plus for the upcoming years? I'm specially looking for changes / improvements in the User behavior analytics (BUA) tool section. Thanks a lot for your time. Cheers Arthur
Send summary view on af specific domain
Hi. How to send the daily summary (under sumary view) only on a specific domains to someone? You can see the differences by choising domain under summary view, but the e-mail including all domains. Thanks. Long H.
ManageEngine security advisory
Yesterday there was an email message from security-advisory@manageengine.com with a "ManageEngine security advisory". How do I subscribe there?
openssl 3.x
Referring to https://pitstop.manageengine.com/portal/en/community/topic/does-endpoint-central-use-openssl-3-x-x-branch Is ADAudit Plus (or any other product from ManageEngine) using openssl 3.x? Reason: CVE-2022-3602 and CVE-2022-3786
Apache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889)
It appears that ADAudit+ is possibly vulnerable to CApache Commons Text 1.5.x < 1.10.0 Remote Code Execution (CVE-2022-42889) in its current release, I have not validated this beyond our vulnerability detection software (Tenable.io). Can you please validate
Use real SSL certificate for ADAudit website?
I cannot see this in the ADAudit documentation. How can a real SSL certificate be used with ADAudit instead of the self-signed one?
Purge Old datas
Hi, I have a question regarding archiving. Currently I have set Adaudit Plus to archive datas older than 60 days. Our AdAudit Plus\pgsql\data folder is 81Go Our AdAuditplus\archive folder is 5Go But when I search for event, for example on my user, I can find event from June 2016. A little bit more than 60 days. So why I have event "active" with more than 60 days ? Another related question, if I want to purge old archive, I have just to delete the zip file on the folder ?
Remove report cover pages
Since one of the recent updates, each of the reports I've set to email to me every morning now have a cover page on them. It means that when I'm clicking through them all in the morning I now have to scroll down to the second page on every report. Is
Need to make an alert on anytime "password never expires" is set
Anyone have this alert and can tell me what is needed? Thanks
Just thought I would share. How far back you can see event data.
If anyone is wonderirng ever, to confirm when you started receiving data on your ADAudit server, just navigate to the following path: "Program Files\ManageEngine\ADAudit Plus\logs\wrapper.log" At the top is when the ADAudit service first started. So we
Backup and Restore Steps AD Audit Plus
Hi, Please someone share the simple PGSQL Backup and Restore steps for AD Audit Plus. Thanks, Ramesh
Can't update AD Audit Plus
Hi, Running ADAudit out of the box with whatever self-signed cert that came with it. However, when I attempt to patch it, I get the following error: " Keystore file not found. Kindly import certificate before applying patch." As far as I can tell, there
Why is the DataEngine Xnode service / modules folder housed on the install folder?
"Program Files\ManageEngine\ADAudit Plus\apps\dataengine-xnode" I get that this feature is to reduce search times but why can't a lot of these audit logs located in the below folder to go MSSQL? Program Files\ManageEngine\ADAudit Plus\apps\dataengine-xnode\data\main\audit-log
Code Signing Certificate for AuditPlus version 7051
So version 7051 of Audit Plus is asking for a certificate to be downloaded as per Download ADAudit Plus Service Pack and enjoy the new product with added audit features (manageengine.com). This seems to be a code signing certificate but our Windows systems
Log4j AD Audit Plus CVE-2021-44228
Hi, i found Log4j-* in /ManageEngine/ADAuditPlus/apps/dataengine-xnode/lib Is there any fix or workaround?
Report for source subnet
Hello community, I'm looking for following report: I want to see the amount of successful logins per subnet. I can see the client ip and username of all successful logins, so the information is basically ready. so for example: User A - Client IP 192.168.10.10
Stop DB Before Windows Updates
Should the DB be stopped before running Windows Updates on ADAudit Plus server
Wrong time in the reports section
Hi After changing the daylight saving time , the reporting hours in ADAudit Plus software have changed. On the main page of the software, the synchronization clock is correct But when I go to the reports, section User Logon Activity , Indicates one
Notifications for Service Pack Releases
Is it possible to get notified when AuditPlus service packs are released i.e. RSS feed or e-mail nitifcation? This would be very useful.
Where do I have to keep my script ?
Hi guys, I want to execute a script when I receive an alert, but I don't know where to store my script ? I tried on my ADAudit+ server, but looks like it doesn't work. I tried: - powershell.exe C:\Scripts\myscript.ps1 - C:\Scripts\myscript.ps1 - C:\
New Script Based Alert Action
Guys, I see in build 5040/5041 you have added the option to fire a script on an alert! This is something I have wanted/asked for for a long time so I am delighted to see that it's made it into the product. Is there any documentation on this feature i..e what script types are allowed (VBScript, powershell etc) and what variables can be passed to that script?
What`s ADAudit Plus default database credentials on PgSQL?
Hi, I need to collect data from database for my own analytical tools. I`ve just installed ADAudit Plus, I know that it uses PgSQL, but I need proper superuser account credentials on SQL server and port number by default.
How to do full Backup and Restore ADAudit Plus correctly
How to do full Backup and Restore ADAudit Plus correctly Hi! ADAudit Plus 6.0.0 was installed with PostgreSQL. Recently, an unknown failure occurred in the web interface and the "User Work Hours" report when generated returns an error that a failure occurred inside the system. In event logs, if you try to view SQL queries and directly execute them in PostgreSQL, they are executed successfully! So the problem isn't in the database? Since version 6.0.0, the data engine-xcode component has been added
How do I add a large list of workstations to the configuration ADAudit Plus 6.0.5?
Hello! There is a list of several hundred workstations in AD, how do I automatically add it to "Server Audit" - > " Configured Server(s)" - > "Workstations" with the application of the AD policy for workstations? We tried several methods: 1. Import using the "cmdUtil.bat" with administrative privileges https://www.manageengine.com/products/active-directory-audit/windows-workstation-auditing-guide-configuring-windows-workstations-using-command-line.html But when entering the command line, successfully
AD Audit plus license question
Hello I have a license related question that I am trying to figure and any input will be appreciated. lets assume a company has roughly around 6000 workstations, 500 servers, and 5 domain controllers. And they have the following licenses/Subscriptions: 1. ManageEngine AD360 ADAudit Plus Professional Edition - Subscription Model -Annual Subscription fee for 5 Domain Controllers 2. ManageEngine AD360 ADAudit Plus Professional Edition - Subscription Model -Annual Subscription fee for 500 member servers
Configuring DFS Auditing
Hi I'm fairly new to ADAudit Plus & I'm a little bit confused about the DFS auditing. We currently have 3 Domain Controllers & 1 main FileServer. We are auditing everything on domain level by having added the 3 DC's to ADAudit Plus. Then we added the FileServer and installed the Agent. This is working perfectly but we are adding more fileservers to the domain & would like to switch to DFS auditing. Our 3 Domain Controllers currently have the DFS role & a couple of namespaces. So should I remove the
User Work Hours - SQL
We would like to do some analysis and custom reporting outside of ADAudit with the 'User Work Hours' including the 'crunched' data. Can you share the SQL to reproduce the User Work Hours report? Thanks.
Why does automatic policy creation in AD using ADAudit Plus 6.0.5 not work?
Hello! Unfortunately, when you click on the "Audit Policy: Configure" button for both domain controllers and servers and workstations, the ADAudit Plus system reports "Invalid user name or password". At the moment, the policies are created manually and everything works. But the question is, on behalf of which user is ADAudit Plus trying to create policies? In the operating system, processes run on behalf of the SYSTEM. A separate administrative account has been added for domain controllers. 1 2 3
Allow Multiple Report Category In a Single Custom Report
I wish we could add multiple categories in a single report. Particularly the Account Logon and Local Logon categories.
Report filter Dropped After Copy
Using Build 6052. I notice that when copying a report porofile the filter is being dropped in the copy.
Increased item limit in list
Hi Now there is a maximum of 100 items in lists, this is a very low limit. Sometimes there can be 2000 alerts and to clear them I can only take 100 at a time. Perhaps 500 and 1000 should be added to the list. /Peter
Failed attempt to read file?
I've noticed that I have several of these entries showing up in ADAudit, event ID is 4656. Users associated with the event are not reporting a problem, and there doesn't seem to be an issue with the hard disks that the files are located on, but these entries are still popping up. Has anyone come across this before?
ADAudit Plus Workstation Locked/Unlocked
Hello: Is there a preconfigured report to monitor when a workstation is locked and unlocked? I would preferable want to see this by Workstation Name as well as User Name. Thank you.
Next Page