Benefits of Using CimTrak for Active Directory
CimTrak detects any change to the attributes of any member entity or configuration. When changes are detected, CimTrak for Active Directory can be used to compare the entity’s attributes to the entity’s previous
CimTrak for Active Directory can:
- Detect when a user has been added to or deleted from the domain, log the activity, and notify the responsible parties by e-mail,
syslog - Detect, log, and notify when users have been given additional privileges.
- Detect, log, and notify when a device has been added to or deleted from the domain.
- Detect, log, and notify when the domain configuration has been modified.
The services of Active Directory are the basis for any Microsoft Windows domain network. Active Directory stores information on all the members of the domain, like devices and users, and authenticates and authorizes the activities of these members. Monitoring for Active Directory with CimTrak detects this information and its schema for changes, additions, and deletions in your network.
How CimTrak for AD Works
When CimTrak locks an Active Directory installation for monitoring, it reads the entire contents of the directory database. It calculates a digital signature for each member, configuration, or schema entity and stores it in CimTrak’s master repository along with a copy of the entity itself.
At user-configured intervals, CimTrak reads the contents of the directory database, calculates the digital signature of each entity, and compares it to the signature stored in CimTrak’s master repository.
When CimTrak detects a changed (or an added or deleted) entity, the entity and its digital signature
