Windows Active Directory Workstations Auditing

Logon-Logoff

Administrators can view the exact time of users' Workstation logon and logoff time along with the logon duration. This critical data in the event of an unauthorized entry or regular monitoring is at the utmost ease to view with detailed reporting which helps prevent further wrong doing at the earliest. Reports can be scheduled for automated periodic reporting along with setting instant email alerts for critical changes.

Windows Workstation Auditing | All Workstations Audit Reports

• Track users' Workstation Logon / Logoff
• View pre-configured reports; automate periodic reporting with scheduled reports
• Set email alerts for critical accounts, unauthorized access
• Logins for IT Auditors with reports view only

Sample Reports

Currently Logged On Users, Logon Duration, Local Logon Failures, Logon History, Terminal Services Activity, Users Logon Duration on Computers, Interactive Logon Failure, Terminated Users Session

Compliance

SMBs or Large organizations have to comply with industry specific Compliance Act like SOX, HIPAA, GLBA, PCI-DSS, FISMA…. With our Compliance specific pre-configured reports and alerts, we ensure your network is under 24/7 audit with periodic security reports and email alerts as standard procedure.

A Few Compliance Specific Reports

SOX – Recent User Logon Activity, Logon Failures, Administrative User Actions, Domain Policy Changes, User Management, Logon History, Changes on Member Server

HIPAA – All File or Folder Changes, Computer Management, OU Management, Logon Duration, Group Management, Terminal Services Activity

GLBA – Local Logon Failures, Folder Permission Changes, Folder Audit Setting Changes (SACL), Successful File Read Access, Domain Policy Changes

PCI-DSS – Logon history, Logon Failures, Successful File Read Access, Changes on Member Server, Radius Logon History (NPS)

FISMA – Administrative User Actions, Failed Attempt to Delete File, Failed Attempt to Write File, All File or Folder Changes, Computer Management

Data Archiving

Processed event log data older than required can be archived and cleared from the working DB. This can be done using the 'Archive Events' option in ADAudit Plus. Set periodic event cleanup schedules to compress events data. Archiving audit data helps to maintain an optimum size for the working DB. The archived data is required for historical reporting, for forensics and Compliance requirements. The audited reports can be exported to xls, csv, pdf and excel formats.

Audit reports from archived data

• Get historic reporting from archived data for security and forensic analysis
• SOX, HIPAA, PCI-DSS require historical event data from a minimum of 3 years
• Save gigabytes on disk space with archived events data
• View reports from years of archived data

Reports & Alerts

Choose from the 200+ pre-configured audit reports with automatic periodic report generation right to your inbox. With 50+ Search Attributes, be ready to be empowered with detailed information, track Windows Active Directory object changes (Users, OU, Groups, GPO, Computer, Schema, DNS and System). Filter reports on business / non-business / all hours. Create custom reports, set profile based reports and also, do historical reporting from the archived data for forensics.

Instant on-screen alerts with emailing of alerts upon unauthorized network access / modification events. User, time and volume based threshold alerts help identify the problem precisely.

All Workstations change audit reports | Compliance audit reports

• Automate periodic reporting with schedulable pre-configured audit reports
• Create custom reports and email alerts with ease in a few clicks
• SOX, HIPAA, FISMA, GLBA, PCI-DSS Compliance specific audit reports to help meet requirements
• Export audit reports in XLS, CSV, PDF and HTML formats

Workstation Audit Reports

Shown here are the Workstation audit reports to give you a view into the details displayed and the various filters you can apply to further pin-point information.

Currently Logged On Users

Logon Duration

Local Logon Failures

Logon History

Terminal Services Activity

Users Logon Duration on Computers

Interactive Logon Failure

Terminated Users Session

More...