Skip to content

Latest commit

 

History

History
12 lines (9 loc) · 801 Bytes

README.md

File metadata and controls

12 lines (9 loc) · 801 Bytes
Raw

ADAudit

Mail a formatted list of account audit events from a domain controller.

A simple PowerShell script to be run on schedule. Extracts events from the Security event log for account and group changes formatted as a simple table.
It is very hacky.

The source includes an annotated list of EventIDs to be extracted.

Requirements before running

  • Change the three mail variables at the top of the source file.
  • Change the two DN strings at source line 100 used for making LDAP paths shorter.
  • The script is expected to be installed in C:\Program Files\Scripts\ and as such a subdirectory Data (C:\Program Files\Scripts\Data\) is expected to exist for saving CSV-formatted reports.