I'm Shawn Barker, Product Manager at Quest Software, and I'm going to demonstrate how Quest Change Auditor can audit administrative changes and activity across both Active Directory and Azure Active Directory. Change auditor for Active Directory helps ensure the security, compliance, and control of Active Directory, whether on premises in the Cloud, or a hybrid of the two.
Change auditor provides a centralized console for all the activity being audited in your on premise AD, and your Azure AD environments. And if you have a hybrid deployment, you will be able to combine the views from both environments into a single pane of glass. Change auditor offers hundreds of out-of-the-box reports, ensuring that your security concerns and regulatory compliance needs are covered.
Change Auditor displays all important information about an event in a simple, readable format. Each of that includes when the change occurred, where it occurred from or the IP address, where the activity took place, who initiated the change or the actor involved, and what object was impacted by the change.
In a hybrid environment, Change Auditor correlates activity across cloud and on premises, showing you the mapped identities, and ensuring that you can view all activity a specific user is responsible for, regardless of whether they initiate it with their Active Directory or their Azure Active Directory account.
Change Auditor also captures the before and after information for changes, so that you can see what has changed and more quickly troubleshoot problems. But change auditor isn't limited to just reporting on Active Directory changes. It also audits activity in Azure Active Directory, windows file and network attached storage from EMC, NetApp, and Dell, SQL SharePoint, Skype for Business, user log ons, and more.
The related search feature gives you instant, one click access to all related events or user activity. In this case, I can look at similar events. And I can also run a related search to pivot on the user activity, viewing all other activity that this user has recently performed.
From the results, I can find out when this administrator recently logged in and from where, as well as other changes they have made, either in Office 65, Azure Active Directory, or on [INAUDIBLE] Active Directory. Change Auditor also offers a web client to allow you to access this information from anywhere.
From the search results, you can plot the activity on an interactive timeline, making it easy to view all related activity within a certain period of time. Select an event, click the hyperlink, and go right to the event details. With change auditor, I can run reports on demand or I can schedule them to run on a regular basis and alert me as needed.
In this case, I can trigger an alert to tell me any time an Azure Active Directory in Cloud only user is created. I can be alerted in a number of ways, including by email. For more information about change auditor or to start your free trial, visit quest.com/change/auditor.
04:07
