Configuring ADAudit Plus to audit removable storage devices

Audit all USB plugins and file activities in removable storage devices for all configured Windows domain controllers, servers, and workstations using the supported OS versions.

Configuring Windows domain controllers

To add and set up audit policies for Windows domain controller auditing, follow the steps in this guide.

Note: While configuring the advanced audit policies for Windows domain controllers, ensure that the below audit category is enabled:
CategorySub CategoryAudit Events
Object AccessAudit Removable StorageSuccess and Failure
Detailed TrackingAudit PNP ActivitySuccess and Failure

Configuring Windows servers

To add and set up audit policies for real-time Windows server auditing and change analytics, follow the steps in this guide.

Note: While configuring the advanced audit policies for Windows servers, ensure that the below audit category is enabled:
CategorySub CategoryAudit Events
Object AccessAudit Removable StorageSuccess and Failure
Detailed TrackingAudit PNP ActivitySuccess and Failure

Configuring workstations

To add and configure audit policies for workstation auditing, follow the steps in this guide.

Note: While configuring the audit policies for workstations, ensure that the below audit category is enabled:
CategorySub CategoryAudit Events
Object AccessAudit Removable StorageSuccess and Failure
Detailed TrackingAudit PNP ActivitySuccess and Failure





 

我们的客户