Audit Account Management vs DS Access
Marten04-01-04, 05:35 AMsomethingI have read a lots of Windows 2003 whitepapers etc about auditing but I still dont understand the difference between Account Management AM) and DS Access (DSA). I have done some tests showing that sometimes I receive events from AM and sometimes from DSA.
For an example, in Users and Computers, fail to reset password, AM alert in event viewer. Fail to rename a user account, DSA alert me in event viewer??
/M
Steven L Umbach04-02-04, 11:29 PMsomethingThere is some crossover between the two with AM being specific to user accounts and
actions associated with them while DSA should be able to record access to all AD
objects similar to auditing of files/folders. -- Steve
"Marten" <anonymous@discussions.microsoft.com> wrote in message
news:B3002FF4-D2BD-41AF-8935-7EDD8C80E863@microsoft.com...
> I have read a lots of Windows 2003 whitepapers etc about auditing but I still dont
understand the difference between Account Management AM) and DS Access (DSA). I have
done some tests showing that sometimes I receive events from AM and sometimes from
DSA. For an example, in Users and Computers, fail to reset password, AM alert in
event viewer. Fail to rename a user account, DSA alert me in event viewer??
>
> /M
For an example, in Users and Computers, fail to reset password, AM alert in event viewer. Fail to rename a user account, DSA alert me in event viewer??
/M
Steven L Umbach04-02-04, 11:29 PMsomethingThere is some crossover between the two with AM being specific to user accounts and
actions associated with them while DSA should be able to record access to all AD
objects similar to auditing of files/folders. -- Steve
"Marten" <anonymous@discussions.microsoft.com> wrote in message
news:B3002FF4-D2BD-41AF-8935-7EDD8C80E863@microsoft.com...
> I have read a lots of Windows 2003 whitepapers etc about auditing but I still dont
understand the difference between Account Management AM) and DS Access (DSA). I have
done some tests showing that sometimes I receive events from AM and sometimes from
DSA. For an example, in Users and Computers, fail to reset password, AM alert in
event viewer. Fail to rename a user account, DSA alert me in event viewer??
>
> /M