Account Management Tracking

Account management tracking lets you view changes to user and group accounts on domain controllers as well as member servers and workstations. In domain environments, the creation, deletion and modification of computer accounts can also be tracked.

All tracking information is linked back to the original security event log event, allowing you to view the actual event that triggered EventSentry.

User Accounts

Tracks when users are created, modified or deleted, and all relevant information about the change is available at-a-glance in the reports. Account management tracking includes the following information:

• On which domain controller, server or workstation where user accounts created or deleted
• Which user created or modified user accounts?
• Which user accounts were enabled or unlocked, and by whom?
• From which computer where changes made?

Group Accounts

Tracks when security or distribution groups are created, modified or deleted, and all relevant information about the change is available at-a-glance in the reports. Account management tracking includes the following information:

• On which domain controller, server or workstation where group accounts created or deleted
• Which user created or modified a group?
• When was a user added to the Administrators or Domain Admins groups?
• To/from which security groups where members added or removed?
• From which computer where changes made?
• Which groups changed their scope?

Computer Accounts

Tracks when computer accounts in a domain environment or Active Directory are added, modified or removed, and all relevant information about the change is available at-a-glance in the reports. The computer account management reports lets you view easily who created or deleted computer accounts, when computer accounts are changed and more.