• State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 65 subscribers
  • Views 8555 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do you audit changes to delegation in ARS

lee.andrews_82510

I can't find any change history that shows when a user was given delegated access to manage a group in AD via ARS.  Is this recorded somewhere? 

Parents
  • 0
    I don't see a history option in the context menu when selecting the AT Links folder but I'll definitely try using a policy as you suggested - but if there is no built in method perhaps this should be an enhancement request.

    We have CAAD sop we can see and monitor changes to groups and ACL updates on any objects in the domain, but of course the user account making these changes is the ARS service account. In the case of delegating rights, and specifically syncing them to AD, the method used to update the initiator in the CAAD event does not work for delegating rights.

    I'll raise this as an issue with Dell - I just wanted to check I was not missing something obvious.
Reply
  • 0
    I don't see a history option in the context menu when selecting the AT Links folder but I'll definitely try using a policy as you suggested - but if there is no built in method perhaps this should be an enhancement request.

    We have CAAD sop we can see and monitor changes to groups and ACL updates on any objects in the domain, but of course the user account making these changes is the ARS service account. In the case of delegating rights, and specifically syncing them to AD, the method used to update the initiator in the CAAD event does not work for delegating rights.

    I'll raise this as an issue with Dell - I just wanted to check I was not missing something obvious.
Children
No Data