of AD changes similar to what
Quest/NetPro use
joe wrote:
Sorry about the delay in replying... my laptop's harddrive died and then the
next day my house got struck by lightning and a bunch of equipment got fried
via the CAT5 wiring and the coax cable coming in from the satellite dish.
It
Chuck-
Have you seen this article?
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/c
hange_notifications_in_active_directory.asp
Darren
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Chopp
Sent: Friday, July 08, 2005 9:53
Darren Mar-Elia wrote:
Chuck-
Have you seen this article?
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/c
hange_notifications_in_active_directory.asp
Yes, I have. Been there, done that, bought the postcard & T-shirt... and,
sadly, it falls far far short of both what
l.activedir.org
|
| cc: (bcc: James Day/Contractor/NPS)
|
| Subject: Re: [ActiveDir] Programmatic auditing of AD changes similar
to what Q
[EMAIL PROTECTED] wrote:
Hi Darren
The Quest tool uses LSAS insertion. The explanation given to a lowly
network admin that can almost spell C++ is they stick a piece of code into
LSAS that intercepts every write to the AD database and reports it.
Short of hacking the secure communications on
IL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Chopp
Sent: Freitag, 8. Juli 2005 22:05
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Programmatic auditing of AD changes similar to
what Quest/NetPro use
Darren Mar-Elia wrote:
> Chuck-
> Have you seen this article?
>
Grillenmeier, Guido wrote:
Chuck - what exactly are you trying to achieve/monitor?
I need to monitor for creation, deletion, renaming and moving of user
objects, group objects and for objects based on 2 or 3 other
application-specific object classes in AD. Additionally, I need to monitor
f
nfirm ... :-)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Chopp
Sent: Monday, July 11, 2005 8:48 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Programmatic auditing of AD changes similar to what
Quest/NetPro use
Grillenmeier, Guido wrote:
&g
Alain Lissoir wrote:
WMI can be used for the monitoring but the capabilities are quite limited
with the current WMI provider implementation.
Despite this, it could be useful is some very specific pin-point monitoring
cases.
However, in your case, you definitively need something else.
NETPRO sol
g
Subject: Re: [ActiveDir] Programmatic auditing of AD changes similar to what
Quest/NetPro use
Alain Lissoir wrote:
> WMI can be used for the monitoring but the capabilities are quite
> limited with the current WMI provider implementation.
> Despite this, it could be useful is some ver
joe wrote:
Ah I ran into your posts in the newsgroups. I responded some there.
To further some of the info given previously, it is possible that some sort
of LSASS injection is being used in one or more products, however, that
doesn't mean this is a supported mechanism. Doing so *could* put you
WMI Actually has an asynronous call that you can use to monitor specific
objects. It will notify you when the object changes and what the
original and new values are. Adam Lissoir wrote some scripts that
demonstrate this. I think these links still work:
http://www.LissWare.Net
See "Sample 3.5
Oops. I meant Alain Lissoir. Sorry Alain.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Isenhour,
Joseph
Sent: Tuesday, July 19, 2005 11:17 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Programmatic auditing of AD changes similar to
1:17 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Programmatic auditing of AD changes similar to what
Quest/NetPro use
WMI Actually has an asynronous call that you can use to monitor specific
objects. It will notify you when the object changes and what the original
and new values are. Ad
Sent: Tuesday, July 19, 2005 1:17 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Programmatic auditing of AD changes similar to what
Quest/NetPro use
WMI Actually has an asynronous call that you can use to monitor specific
objects. It will notify you when the object changes and wha
ECTED] On Behalf Of Alain Lissoir
Sent: Tuesday, July 19, 2005 11:28 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Programmatic auditing of AD changes similar to
what Quest/NetPro use
I just want to stress the fact that WMI is not an auditing technology
per se.
All what WMI does is po
2005 11:40 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Programmatic auditing of AD changes similar to what
Quest/NetPro use
I always assumed that the WMI call is using DirSynch under the covers.
That seemed to me to be the only way it would be able to accomplish the
notifications.
17 matches
Mail list logo
