The user/system has no admin privilege
Hi everyone I have set up ADAudit Plus on a dedicated domain-joined server and created a dedicated service user (not a member of "Domain Admins") to use as Domain Credentials. Permissions for that service user have been set according to step 1, 2 and 4 in the Audit Permissions guide https://www.manageengine.com/products/active-directory-audit/audit-permissions-configuration-ad-audit-plus.html. Steps 3 and 5 are not considered necessary as we don't have a "Failover Cluster" nor "File Server Auditing"
Risk-Detection : Insufficient privileges to carry out risk detection.
Hi! AD Audit - Reports - Azure AD - Risk Detection What are the permissions required in Azure for this work correctly? Thanks!
ADAudit migration from PostgreSQL to MSSQL -
Hy. I'm having trouble migrating AD Audit from PostgreSQL to MSSQL - SQL connection gets created, new database gets created, and when data migration starts, it stops at 3%, throwing an error "WorkerPOOL execution terminated forcibly". Any advice is welcome.
Logon events (possible more?) stops showing in web UI every night
We have a problem with the auditing of logon events stops displaying every night. it doesn't come back until I restart the service (ie. the events is monitored but not shown in the web UI). Anyone else had this problem? We tried applying the latest release
Unable to apply latest patch
After running updatemanager.bat I get a message stating: Error: Problem occurred during previous patch installation/uninstallation and has not been reverted to actual state. Hence the setup becomes inconsistent. Please contact support to resolve the problem.
Estatus of Agent in Domain Controller doesnt change: Success -> Listening for events
El dia de ayer tenia un problema, al momento de instalar un agente en mis controladores de dominio, el estado no cambiaba de Success o como normalmente estaba que es Listening for events, asi que lo me ayuda a resolver el caso fue renstalar el agente
ADAudit and NetApp least privilege
When configuring ADaudit to connect to a Netapp filer, we need to create an account on the NetApp first. In your guide it indicates that the user needs admin role. This grants full read/write access to the API. We wish to create a specific role for ADaudit
problem with event subscription on member server
i have a old version adaudit plus and I have bought 100 licences for member servers. i have a problem when i click in member server on some servers and event subsriptions on run now, i receive next errors: Error - The requested operation is not supported
Java.exe Hight CPU usage
Hi ALL I detected hight CPU usage by Java.exe ( Zulu Platform x64 Architecture) at latest several days Version:7.2.0 Build:7201 Anybody have similar situation ??
Azul Zulu Java Multiple Vulnerabilities (2023-01-17)
I am seeing ADAudit Plus flagged for this vulnerability by Tenable/Nessus, running on the latest version of ADAudit+ Azul Zulu Java Multiple Vulnerabilities (2023-01-17): https://docs.azul.com/core/zulu-openjdk/release-notes/january-2023
Looking to start fresh
Hello, I have an active license with ADAudit Plus, but I am looking to wipe the databae and start fresh. A lot of changes have been made for file servers and the current data in there is no longer needed. How can I wipe the Database and start fresh without
Ontapp AdAuditPlus
hello everyone, I am using Netapp Ontap v 9.12.1. I am trying to connect with AdAuditPlus. I got the following error. Error in getting Shares,The network path was not found - Error Code:35 Anyone have experience on this? Thanks. https://www.manageen
difference timestamp of last event vs last event read time
after installing new adaudit, it's different like this, what should I do, Any and all help is appreciated. Thanks you
AD Audit Plus migrate to MS SQL
Hello! I try to transfer the database to MSSQL, but every time I get an error: [SYSERR]|[INFO]|[36]: java.sql.SQLException: Cannot find the symmetric key 'ZOHO_SYMM_KEY', because it does not exist or you do not have permission.| The rights of the sql
No data available, but policies are configured correctly.
Dear all, maybe someone already had this issue and can point me in the right direction: in ADAuditPlus (latest release), Tab Reports, I am unable to visualize any kind of information regarding LogonAudit, AD Changes, User Management... Is almost everything
ADAudit Plus Laps Report
We are looking to audit our LAPS password attribute reads, but we do not use the GUI tool from Microsoft to read the password attribute. The current LAPS Password Read report only seems to get the events that are generated by the gui tool and not the
Source for User Logon Reports\Logon Failures
We don't use all the aspects of AD Audit Plus, just a select few. Most of the reports we need work fine from the audit configs we have. However, under "User Logon Reports", LOgon Failures, Logon Failures based on users, failures due to Bad Password,
error 404 after update to 7080
Hi ALL Anybody has similar issue in build 7080
Create alert for Group Policy Settings Changes
Hello, I'm hoping to create an alert based on the 'Group Policy Settings Changes' report, but don't appear to be able to. An action is seen in this report that is not detected in the GPO Management alert profiles. Is there a reason why you can create
GPO Management shows no data
Hello, We use a service user for AuditPlus. Most of reports are working excpet the GPO part : - No Data at all for GPO Management - No "Modified By" nor "Domain Controller" for GPO Settings Change". On "Domain Settings", Domain Controller show sometimes
Reverse Proxy with Let's Encrypt
Hi, I've created a reverse proxy server to handle SSL certs on the front end for ADAudit Plus. However, there seems to be a browser issue with Chrome and Brave and Edge, where I get this error: If I use Firefox, the site loads fine. I'm using Nginx
"ADAudit Plus is not running" after migrating to new server
Hi! We recently migrated ADaudit to another server following the guide. And it is working fine. But after the migration we are getting e-mail that "ADAudit Plus is not running" and the URL is pointing to our old server. Email looks like this. And I can´t
Database data missing after AD Audit Plus patch
Hello. After update to latest Version:7.0.5 Build:7054, all previous data is missing for Active Directory Reports However, all Azure AD data is available: How can I check if the AD data is still in the database and recover it?
Can't add Synology NAS to due to "Invalid Server Name"
I'm using ADAudit Plus through Log360 and I can't seem to add a Synology NAS to file audit due to constantly receiving an "Invalid Server Name" error. This happens no matter what I type in the box. I've tried the FQDN, just the hostname, no numbers/special
Xnode Usage and Data
What exactly is stored in the folder <installdir\\ManageEngine\ADAudit Plus\apps\dataengine-xnode\data\main. This folder is now larger than my MSSQL DB that hosts Auditplus 7051. My DB is 80 GB but this folder is 100 GB. I'm wondering what AuditPlus uses
remcom.exe crashes
greetings remcom.exe crashes all the time and makes Adaudit service halted. Error details attached. OS and hardware details: windows server 2019 48 GB RAM 24 virtual core CPU any help is appreciated!
The "ManageEngine ADAudit Plus" service is not running
The "ManageEngine ADAudit Plus" service is not running after adding dedicated service account to Log On As tab with the required permissions in order to avoid using Domain Admin account.
There are No Printers Available in the Selected Server
Hi there! We encountered a problem while auditing print jobs. Unable to add a print server to the program: "There Are No Printers Available in The Selected Server". On the server close to the twenty printers. Audit policy is included at the domain level.
updating problem
Hi I recently migrate the DB of ADAudit from Postgres SQL to MSSql server. now according to logs, I can't upgrade the ADAudit plus due to MSSQL errors. image of log file attached. thanks
Fatal stop of data collection ... (DataEngine XNode?)
On the Windows 2019 x64 server, ADAudit Plus (Product Version: 6.0.7, Build No: 6071) is installed using the built-in PostgreSQL database (10.3). This version was raised by patches: 5.3.0, 6.6.0, 7.1.0 (7.1.0 installed after a crash, - the problem was
Server Settings - SMTP
On build 6067, when I try to send a test email, or send an email via the server settings menu, the program will just say "Loading" and won't progress any further?
Time Generated Incorrect by Years?
Hi, I've just finished installing ADAudit and am starting now to configure things but yesterday I switched on all the critical alerts and over night received a few emails. One of them is titled PowerShell Base64 encoded shellcode but something's not
Problem with Enabling SSL
Hello! We are having some problem enable SSL on our ADAP. Followed every step from the guide and after we start ADAP again it still shows unsecure connection. Have tried in the server.xml take away the <!-- --> from that section and after that the loading screen get stuck at "Loading application layer" and nothing more happens after that. I hope someone have some tips up there sleeves that can help us. Sincerely Daniel
Can't delete 3 different member servers in AD Audit Plus
Actually I can delete them, but after a while (hours) they are automatically in the list again. I have tried to delete them 3 times now. When they are in the list, they fails to fetch event log data, because they are deleted from the AD and does not exist anymore. How can they be removed from permanently from AD Audit Plus?
User Work Hours - Last Out Time
First in time seems to be pretty good but the last out time on this report is pretty inaccurate. I assume its because the fetch occurs every 3 hours and if the user switched off or disconnects there machine that another fetch doesn't take place before the crunch and so the last out time is never fetched? It looks like the min fetch time is 3hrs, am I on the right track? Any solutions to this?
ADFS audit stopped working after 6050 upgrade
Hi I updated from 6032 to 6050 and now we receive no ADFS audit info. Is it some known problem with ADFS audit in 6050?
Cannot remove member server
Hi I have a member server I cannot remove. When I try to remove it I get this message: Synced server(s) can not be deleted But I do not know where it is synced from. It show up like this in server list: Because it is synced it does not get imported to Eventlog Analyzer.
Exclude Plug and Play Devices from AD Audit Plus FIM Logging?
Is there a way to exclude certain plug and play devices from ADAudit Plus's File Integrity Logging? We noticed this new feature when we upgraded ADAudit Plus and migrated it to a new server that's logging all plug and play interactions on Member Servers, the issues is it's pushing these to our splunk instance and opening tickets to our On-Call because they're coming through as File Integrity Alerts every time someone logs into the server with printer redirection enabled.
File Audit: No Data Available
I have a problem with File Audit. Nothing is displayed in the reports: (No Data Available) All file\folder actions are logged on the server in the Eventlog Security from Server. auditpol /get /category:* shows correct result (compared with Help-Page) Under "Configured Servers -> Windows File Servers" the status is "Success" and also under "Configured Shares" is all green. "Eventlog Property" from this Server also shows me correct values. The service account of ADAudit has full access rights to server
AD Audit Plus Crashing
Hi, we've been experiencing a crash in AD Audit Plus following the below error. [com.zoho.cp.Txn]|[SEVERE]|[33]: Exception while aborting connections enlisted in txn| Doing a search online has yielded no troubleshooting avenue. I've checked system and applications logs in addition to the AD Audit Plus logs and I've also checked for scheduled tasks around the same time. But nothing jumps out. Any ideas? Regards, Devin
Next Page