• State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 62 subscribers
  • Views 7626 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do you audit changes to delegation in ARS

lee.andrews_82510
over 7 years ago

I can't find any change history that shows when a user was given delegated access to manage a group in AD via ARS.  Is this recorded somewhere? 

Parents
  • 0 over 7 years ago
    I don't see a history option in the context menu when selecting the AT Links folder but I'll definitely try using a policy as you suggested - but if there is no built in method perhaps this should be an enhancement request.

    We have CAAD sop we can see and monitor changes to groups and ACL updates on any objects in the domain, but of course the user account making these changes is the ARS service account. In the case of delegating rights, and specifically syncing them to AD, the method used to update the initiator in the CAAD event does not work for delegating rights.

    I'll raise this as an issue with Dell - I just wanted to check I was not missing something obvious.
Reply
  • 0 over 7 years ago
    I don't see a history option in the context menu when selecting the AT Links folder but I'll definitely try using a policy as you suggested - but if there is no built in method perhaps this should be an enhancement request.

    We have CAAD sop we can see and monitor changes to groups and ACL updates on any objects in the domain, but of course the user account making these changes is the ARS service account. In the case of delegating rights, and specifically syncing them to AD, the method used to update the initiator in the CAAD event does not work for delegating rights.

    I'll raise this as an issue with Dell - I just wanted to check I was not missing something obvious.
Children
No Data