««12

AZMAN (Authorization Manager) Events Expand / Collapse
Author
Message
Posted 7/29/2009 1:27:11 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 326, Visits: 0
By the way, the event sample you provided is apparently a change to a Role object instead of an Application Group.  Can you try creating an Application Group and then adding a member?
Post #161
Posted 7/29/2009 1:41:12 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 326, Visits: 0
More research also indicates that on 2003 you need to enable "Audit object access" for success as well.  It also looks like you need to grant whatever account AzMan is running as:Allow use of "Generate Security Audits" and "Manage Auditing and Security Log".

Hope some of this helps.  I've had very little to do with AzMan so far but need to dive into it.

Post #162
Posted 7/29/2009 8:08:17 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/5/2009 10:14:27 AM
Posts: 8, Visits: 11

Azman is in AD Mode.

In the event log that I´ve Posted before, it doesn't show the machine where the change was made. Ar01dom2vp is a DC.
 

Post #163
Posted 7/29/2009 8:30:50 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/5/2009 10:14:27 AM
Posts: 8, Visits: 11
Randy,

The Event I´ve posted is related to a change in one of our Azman Roles.

I Added an AD user to an Application group in Azman.

Inside the Application (in Azman) I added, in "Role Assignment" folder, an AD User inside one of the aaplication groups.

this is what I did:

Authorization Manager

|_ Authorization Store

    |_ MY Application

        |_ Groups

        |_ Definitions

        |_ Role Assignments

            |_ My Rol 1      <-- AD users/groups were added to this role

            |_ My Rol 2

Thanks

Post #164
Posted 8/5/2009 10:15:39 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/5/2009 10:14:27 AM
Posts: 8, Visits: 11
Is there anyone who knows what else should I do about it?

Thanks

Post #165
Posted 10/6/2009 10:05:49 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 10/6/2009 9:59:49 PM
Posts: 1, Visits: 0
RandyFranklinSmith (7/25/2009)
OK, have you enabled "audit account management events" in your Windows Security Settings? See http://www.ultimatewindowssecurity.com/wiki/WindowsSecuritySettings/OVERVIEW-Audit-Account-Management. If you enable that setting as well as the one you just mentioned in Authorization Manager, then you should start seeing events like 687-693 which are documented at http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/Default.aspx.



Have the same problem thank you for this I have tried this now its all fine thank you for this

Paul Finn
Strandkorb
Post #223
Posted 8/28/2010 4:41:53 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 326, Visits: 0
welcome!
Post #435
« Prev Topic | Next Topic »

««12

Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:14am