Auditing for account or group creation priviledge

Sgupta

Guest

Posts: n/a

25th Jun 2010

How can a user or group access privilege escalation for account or group
creation can be audited and reported with the Windows 2003 active directory.

Even with all auditing enabled It only shows event id 566 as the only
significant event with little info as below. It doesn't display the user or
group being granted acccess for and/or access to

Accesses: WRITE_DAC

Properties:
WRITE_DAC
domainDNS

« how do I export a certificate to x.509? | Auditing object access from network »

Thread Tools
Show Printable Version Email this Page
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Group Policy Auditing	Anuj K Srivastava	Microsoft Windows 2000 Active Directory	1	23rd Sep 2005 06:23 PM
Auditing an email before it goes out to a group	PazNaz Sue	Microsoft Outlook Discussion	1	15th Jul 2005 12:10 AM
User Creation Auditing	Jeff	Microsoft Windows 2000 Active Directory	2	26th Jan 2004 12:48 PM
Group policy auditing	=?Utf-8?B?TGFr?=	Microsoft Windows 2000 Active Directory	1	16th Dec 2003 05:35 PM
auditing 1 AD account	john	Microsoft Windows 2000 Security	3	8th Jul 2003 09:18 PM