User Management

This reporting module lists audit information on all user management actions.

Pre-Configured User Management Reports

Click on the Reports tab and select the User Management tab on the left, to view the reports listing.

Recently Created Users Recently Deleted Users Recently Enabled Users Recently Disabled Users
Recently Moved Users Recently Locked Out Users Recently Unlocked Users Frequently Lockedout Users
Recently Password Changed Users Frequently Unlocked Users Recently Password Set Users User Based Password Changes
User Based Password Reset Recently Modified Users Password Never Expires Set Users Extended Attribute Changes
User Attribute New and Old Value Last Modification on Users Account Lockout Analyzer User Services
User Object History      

Audit every user management actions across the Windows server environment. View reports based on specific actions; with data on recently created users / deleted / enabled / disabled / moved / locked out / unlocked / lockedout users and many more reports which are domain specific. A Pie / bar chart summarizes the actions in the selected domain.

To view an Audit Report

  1. Click on Reports Tab > User Management > Choose Report.
  2. Select the Domain.
  3. Select the Period (between 1 hr and 23 hours), a custom period can also be defined & saved for easy reference.
  4. A graphical display with detailed events summary lists the audit information for the selected period.
  5. Clicking on an event in the bar graph, filters the report view highlighting only the selected event.
  6. Quick search option can be used for precise filtering.

Filter Attributes in the User Management Reports Category

The below filter attributes can be added or removed to the reports under the User Management category using the Add / Remove Columns link.

{Message, Caller User Domain, Group Name, service status, Domain Controller, Remarks, machine name, display name, start type, Creation Time, STATUS, Details, Deleted Time, service, Examiner Details, Lockedout Time, Caller Machine Name, UNIQUE ID, Description, User Principal Name, Modification Type, SAM Account Name, user name, Permission Changes, binary path, SID, Event Type, Attribute Old Value, Modified Attributes, Caller User Name, Modified Time, User Name, Attribute New Value, COUNT, Logon History, User Account Control, Domain}

Recently Created Users
This Report Provides Audit Information on all Recently created Users. User Created (Account Name / Sam Account Name), Who created the user (Caller User Name), When was the user created (Creation Time), and others.

Recently Deleted Users
This Report Provides Audit Information on all Recently deleted Users. User Created (Account Name / Sam Account Name), Who created the user (Caller User Name) , When was the user created (Deletion Time) and others.

Recently Enabled Users
This Report provides Audit Information on Recently enabled users. The list of users enabled in the selected time period, the "Caller User" ie) who enabled them, the times at which the users were enabled can be viewed.

Recently Disabled Users
This Report provides Audit Information on Recently Disabled users. The list of users disabled in the selected time period, the "Caller User" ie) who disabled them, the times at which the users were disabled can be viewed.

Recently Moved Users
This Report provides Audit Information on Recently Disabled users.

Recently Locked Out Users
This Report provides Audit Information on Recently Locked Out Users. The User who was locked out, the times at which the user was Locked Out in the selected period, and the Caller Machine Name during Account Lockout.

Recently Unlocked Users
This Report provides Audit information on all the users whose accounts have been unlocked in the selected period. Information like User Name, the Caller User Name, the time of unlock (modified time), Event Type (Success / Failure) and other audit information can be monitored.

Frequently Lockedout Users
This Report provides Audit information on all the frequently lockedout users in the selected period. Information like User Name & Count audit information can be monitored.

Recently Password Changed Users
This report provides audit information on Users whose Passwords were Changed in the selected period of time. Information like User Name, the Caller User Name, the time of Password Change (Modified Time), Event Type (Success / Failure) and other audit information can be monitored.

Frequently Unlocked Users
This Report provides Audit information on all the frequently unlocked users in the selected period. Information like User Name & Count audit information can be monitored.

Recently Password Set Users
This report provides audit information on Users whose Passwords were set in the selected period of time. Information like User Name, the Caller User Name, the time Password was set Change (Modified Time), Event Type (Success / Failure) and other audit information can be monitored.

User Based Password Changes
This Report provides Audit information on all the user based password changes in the selected period. Information like User Name & Status (Success / Failure) audit information can be monitored.

User Based Password Reset
This Report provides Audit information on all the user based password resets in the selected period. Information like User Name & Count audit information can be monitored.

Recently Modified Users
This report provides Audit Information on the Users who were modified in the selected period of time. Information like User Name, the Caller User Name, Modified Time, Modified Attributes and the Domain Controller are displayed.

Password Never Expires Set Users
This report provides Audit Information on the Users who password settings are set to never expire. Information like User Name, Caller User Name, Modified Time, Modifiaction Type and the Domain Controller are displayed.

Extended Attribute Changes
This report provides Audit Information on the Extended attribute changes along with the permission changes and the values modified in the selected period of time. Information like User Name, Caller User Name, Modified Time, Modified Attributes, New Value, Old Value and the Domain Controller are displayed.

User Attribute New and Old Value
This report provides Audit Information on the user attribute new and old value changes in the selected period of time. Information like User Name, Caller User Name, Modified Time, Modified Attributes, New Value, Old Value, Event Number and the Domain Controller are displayed.

Last Modification on Users
This report lists audit information on the Last Modification Activity done on Users Accounts. The user, the caller name and the attribute modified are displayed.

Account Lockout Analzer
This report lists audit information with the details behind the account lockouts. The user, caller name, caller machine name, lockedout time, analyzer details and logon history are displayed.

User Services
This report provides audit information on all the services that use the user(s) credential to run in the particular computer(s).

User Object History
This report provides audit information on Active Directory User Object's History. The Caller User Names of who modified the Selected User Object and when (Modified Times).

 
Copyright © 2019, ZOHO Corp. All Rights Reserved.
ManageEngine
Get download link