Features and Benefits

Audit Detailed Active Directory Changes

InTrust Plug-in for Active Directory provides comprehensive, detailed, real-time auditing of all changes to AD and GPOs, including changes to AD configuration, mailbox security and GPO settings. InTrust Plug-in for Active Directory provides all information behind important changes, including who made the change, where they made the change from and the before and after values. This provides operational value by allowing an administrator to troubleshoot AD problems and reverse any changes if necessary. It also has security and compliance value by allowing organizations to track changes to AD security and policy and showing how the changes have strayed from the approved configuration.

Protect Active Directory Objects

In addition to tracking all changes to AD and GPOs, InTrust Plug-in for Active Directory provides protection against changes to the most critical AD objects, such as OUs being accidentally deleted and GPO settings being modified. InTrust Plug-in for Active Directory can immediately notify you of unwanted changes via e-mail or SNMP, take automatic action against undesired changes, and even prevent changes to the most vulnerable objects.

Audit Unusual User Activity

InTrust Plug-in for Active Directory collects and correlates all unusual user and suspicious administrator activity. For example, InTrust Plug-in for Active Directory reports on logon anomalies such as multiple failed logons and user logon after regular hours, as well as unauthorized usage of built-in administrator accounts.

Audit Active Directory Security Changes

InTrust Plug-in for Active Directory audits when users and administrators are granted additional permissions in AD, either through addition to security groups, assignment of user rights or delegated rights to AD. It also tracks policy changes, such as modified account, domain, Kerberos and IPSec policies.

Audit Adherence to Security Best Practices

InTrust Plug-in for Active Directory ensures that established security best practices and internal policies are maintained by notifying when these practices are violated. For example, InTrust Plug-in for Active Directory reports on enabled guest accounts, the running of prohibited applications and services, changes to FSMO role holders, use of SIDFiltering, and changes to the audit policy; all audited by client machine. This allows the physical location of a change to be captured.

Real-Time Response

InTrust Plug-in for Active Directory provides real-time response to the most critical events and changes to AD. Administrators can be notified immediately by e-mail when possible violations and changes to critical objects occur. In addition to providing these notifications, InTrust Plug-in for Active Directory also takes immediate, automatic action in response to certain events, such as disabling the offending user or reversing the change.

Management Pack for MOM 2005

InTrust Plug-in for Active Directory enhances the monitoring and diagnostic value of MOM 2005 by providing valuable information about critical changes to AD and GPOs. The InTrust Plug-in for Active Directory Management Pack for MOM ensures that important configuration changes are raised in the MOM Operator Console, with all the details behind the change including who made the change, and the before and after values. This empowers administrators with a single console with access to both performance and availability alerts as well as critical changes to AD.

Quick Installation and Deployment

InTrust Plug-in for Active Directory features a Quick Start wizard that reduces the amount of time it takes to get results, and further simplifies the user experience. The Configuration Wizard guides you through a complete deployment of your activity tracking and change auditing solution, including site creations, associated policies and tasks, and real-time rules.