Forum Discussion
Azure AD Connect Admin Audit log
Peter Holland For version 1.5.30.0 onwards, every time a user makes a change to the AADConnect configuration using the Wizard, a time-stamped snapshot of the changed configuration is saved. Comparing these snapshots will show the exact changes that were made, including who made the changes.
Soon, customers will be able to use these snapshots to restore a server or build a copy of a server by specifying the snapshot file in the installer process.
Rob de Jong do you know where these snapshots are saved? my preferred domain controller has somehow changed to an old decomissioned DC? and due to the lack of auditing I have no way of knowing if this was done by the system or an admin?
Rob de Jong could you please share the steps to extract/export the snapshot and check the logs.
Rob de Jong I know (and use) the import/export feature, but I don't know how to find which AADC admin has made a change on AADC config (like changing OUs, switch staging mode...) and when.
Is there a way of knowing that ?
Thank you
Rob de Jong thanks for the reply.
That sounds pretty flipping awesome!
Peter Holland Yeah, right? I'm super hyped about this! We're aiming for public preview of the "import" side of this feature in a couple of weeks - where we will also release a feature to make a configuration snapshot of an older (pre 1.5) version which can be used to create an upgraded copy of the older server.
Jus think about all the possibilities once we have this in place...Rob de Jong If there is a snapshot, it seems like it would be rather trivial for a third party tool like AD Audit to alert when there is a change. Similar to how they monitor changes to group policies now.
