Thursday, January 27, 2011

Rss feed of Active Directory Changes?

Is it possible to setup a RSS feed to view all changes made to an Active Directory database?

  • If you use the Quest Active Directory PowerShell extensions you can easily enough query for all the new/changed users, computers, etc.

    Matt : Quest is the tool of choice around here as well.
    From mrdenny
  • There are products which monitor/audit AD changes, however they are expensive enterprise-level products, which will typically require a SQL backend and significant storage.

    As mrdenny said, this can be done programmatically (in any language with AD/LDAP hooks) and present the output in xml format. (RSS is essentially an xml document containing a directory listing of articles.)

    If you have a serious need to do auditing, I recommend beginning with a search for "Active Directory Change Auditing", otherwise I'd stick to a scripted solution. Microsoft's Technet Script Center Repository has a lot of code that people have offered for free to get you started.

    From gWaldo

0 comments:

Post a Comment