What is the optimal set of administrative tasks to audit in Active Directory?
Hi Guys,
I am trying to figure out an optimal list of the set of administrative tasks that we should audit in our Active Directory.
While disk space is cheap, there’s no point dealing with extraneous data, so it would be helpful to figure out the core (essential) identity and access management tasks that we should definitely specify auditing for.
For example, the usual account and group management tasks are certainly in, but what about tasks such as the upload of a picture on a user account, or the linking of a group policy to a site object, or the change in permissions to a service connection point?
