After you install Change Guardian, you must configure your Active Directory environment to ensure that the operating system generates and retains Active Directory events until Change Guardian processes them. The following items must be configured by someone with domain administrator permissions for the Windows domains that Change Guardian monitors:
Security event log
Active Directory auditing
Active Directory security access control lists (SACLs)
The following table lists the requirements and recommendations for computers running Active Directory Domain Services:
|
Category |
Requirement |
|
|---|---|---|
|
Operating System |
One of the following:
|
|