Admon Alerts

This plugin monitors local admin group for changes and alerts admins when changes have been made.
Post Reply
benf
Posts: 17
Joined: Fri Jan 08, 2016 12:29 pm
8

Admon Alerts

Post by benf »

Hi, I am not sure what is going wrong, but we have one of our managed accounts that is local admin on all machines but Admon keeps creating tickets that the account has been modified/tampered. I am not sure if I have to manually 'add' the account on each device first? Which doesnt seem to make sense.

Is there anyway to check logs on why the Admon keeps thinking something is being add/remove when nothing is changing?

thanks

User avatar
Cubert
Posts: 2430
Joined: Tue Dec 29, 2015 7:57 pm
8
Contact:

Re: Admon Alerts

Post by Cubert »

You should stop all monitoring on that client via plugin, then reset the monitors back on. This will cause a refresh of the monitored list which should now include that admin user.

benf
Posts: 17
Joined: Fri Jan 08, 2016 12:29 pm
8

Re: Admon Alerts

Post by benf »

Okay thanks, I have it off now, and will try that. I did notice that it did not 'load' all the accounts that were already in there on all systems to begin with, so maybe I missed something.

I will try again

Post Reply

Return to “ADMON Administrators Group Monitor plugin”