Netwrix Auditor

Current version 4.0, released on April 2, 2013:

• What's New:
  • New version of Netwrix Windows Server Change Reporter 4.0
    • Completely revamped version with major improvements.
    • Integration with Netwrix Management Console: unified interface for most Netwrix products.
    • Auditing of Microsoft DNS Server.
    • Basic change management capabilities: editable status and comment fields for each change.
    • Improved reporting:
      • The Overview report shows high-level statistics on changes.
      • Drill-through reports link to the next level of detail.
      • Twelve new reports.
      • The report Subscription feature allows scheduling any available reports for automatic delivery by specifying report filters, schedule (daily/weekly/monthly) and recipients.
    • Automatic audit configuration on target computers.
    • New choice options for monitored computers: from within an AD container, an IP range, or by importing a list of computers from a file.
    • Email delivery through SMTP servers with SSL support (including the implicit SSL mode).
    • Support for the installation on servers with FIPS enabled.
    • Configurable audit database retention policy.
    • Typical fixes and updates.
  • The addition of Netwrix User Activity Video Reporter 1.0 allows to track all activities in any component of an IT infrastructure, regardless of the software you need to audit:
    • Video recording of users¹ activity (both interactive and remote sessions)
    • The Netwrix VideoScape technology allows collecting session embedded metadata (application names and windows titles, etc.) that can be used for filtering and data search inside video recordings.
    • Video recording session filters (allow recording only the specified users or active applications).
    • Ad-hoc reports, filtered by time/computer/user/application.
    • Possibility to start playback from a point associated with an action log entry.
    • Video recording sessions retention.
    • Integration with other Netwrix Change Reporter products allows to see HOW particular changes reported by these products were made.
  • Typical fixes and updates of Netwrix Management Console.

Version 3.3, released on January 24, 2013:

• What's New:
  • New version of Netwrix SQL Server Change Reporter 2.6:
    • Typical fixes and updates.

Version 3.2, released on November 16, 2012:

• What's New:
  • Automatic deployment and configuration of SQL Server 2012 Express Edition with Advanced Services (SQL Server 2008 for Windows Server 2008 w/o service pack, Windows Server 2003 or below).
  • New version of Netwrix Active Directory Change Reporter 7.2.
  • Support for the installation on Windows Server 2012 and Windows 8.
    • Support for Exchange 2013.
    • Support for Windows 2012-based domains.
    • A new report: "Users without Distribution Group Membership".
    • Support for the installation on servers with FIPS enabled.
    • Typical fixes and updates.
  • The addition of Netwrix Event Log Manager 4.0 which extends Netwrix Change Reporter Suite with native event log management for both syslog and Windows hosts. Version 4.0 has the following new features:
    • Support for syslog event collection. Predefined events collection rules are available for Ubuntu 11 and RedHat Linux.
    • New choice options for monitored computers: from within an IP range or by importing a list of computers from a file.
    • The new Subscription feature allows scheduling any available reports for automatic delivery by specifying report filters, schedule (daily/weekly/monthly) and recipients.
    • 30 new reports have been added.
    • New option allowing the collection and archiving only of the important events. Predefined sets of audit archiving filters are available for the following regulatory compliances: GLBA, HIPAA, PCI, SOX.
    • New option to collect detailed event descriptions and include them in reports.
    • Typical fixes and updates.
  • Support for the installation on Windows Server 2012 and Windows 8.
  • Support for Windows 2012-based domains.
  • All modules of the suite support auditing of Windows 2012-based domains.
  • Typical fixes and updates of Netwrix Management Console.

Version 3.1, released on October 2, 2012:

• What's New:
  • New Version: Netwrix Active Directory Change Reporter 7.1:
    • Improved support for Microsoft Exchange Server 2010
    • Improved scalability in larger AD environments
    • Integration with Netwrix Non-owner Mailbox Access Reporter for Exchange
    • Primary group membership displayed in Snapshot Reports
    • Support for Asian languages in report filters
    • New reports for Active Directory
    • Configurable audit database retention policy
    • Typical fixes and updates

Version 3.0, released on September 14, 2012:

• Latest version of Netwrix Management Console:
  • Improved user interface, typical fixes and updates
• Latest versions of Netwrix products, including:
  • Netwrix SQL Server Change Reporter 2.5
    • Configurable Record, Row and Column content auditing including the before and after values.
    • Originating workstation tracking further clarifies the source of a change when changes are made using the same service account.
    • SQL Job change auditing: tracks changes made to Jobs, Job Steps and Job Scheduling.
    • Permissions change auditing for tables, views, stored procedures and functions.
    • Improved report delivery options, including the new CSV format and pre-delivery compression.
    • Typical fixes and updates.
  • Netwrix Non-owner Mailbox Access Reporter for Exchange 3.0:
    • Improved support for Microsoft Exchange Server 2010.
    • Reports show accessed mailbox object types: email, appointment, note, task, contact, etc.
    • Optional notifications to users about non-owner access to their mailboxes.
    • Support for the SMTP authentication (including SMTP SSL).

Version 2.1, released on May 8, 2012, with the following products included:

• Netwrix Active Directory Change Reporter
• Netwrix Active Directory Object Restore Wizard
• Netwrix Change Reporter for System Center Virtual Machine Manager
• Netwrix EMC Storage Change Reporter
• Netwrix Exchange Change Reporter
• Netwrix File Server Change Reporter
• Netwrix Group Policy Change Reporter
• Netwrix Logon Reporter
• Netwrix NetApp Filer Change Reporter
• Netwrix Network Infrastructure Change Reporter ^BETA
• Netwrix Non-owner Mailbox Access Reporter for Exchange
• Netwrix Server Configuration Change Reporter
• Netwrix SharePoint Change Reporter
• Netwrix SQL Server Change Reporter
• Netwrix VMware Change Reporter

New features:
Netwrix File Server Change Reporter:

• Support for Failover Clusters.
• Support for EMC VNX/VNXe file storage systems.
• The following reports were added: "Folder Permission Changes" and "All File Server Activities".
• Typical fixes and updates.

Version 2.0, released on August 11, 2011, with the following products included:

• Netwrix Active Directory Change Reporter
• Netwrix Active Directory Object Restore Wizard
• Netwrix Change Reporter for System Center Virtual Machine Manager
• Netwrix EMC Storage Change Reporter
• Netwrix Exchange Change Reporter
• Netwrix File Server Change Reporter
• Netwrix Group Policy Change Reporter
• Netwrix Logon Reporter
• Netwrix NetApp Filer Change Reporter
• Netwrix Network Infrastructure Change Reporter ^BETA
• Netwrix Non-owner Mailbox Access Reporter for Exchange
• Netwrix Server Configuration Change Reporter
• Netwrix SharePoint Change Reporter
• Netwrix SQL Server Change Reporter
• Netwrix VMware Change Reporter

Netwrix Active Directory Change Reporter:

• Real-time alerting on Active Directory changes that allows to "subscribe" select recipients to receive instant e-mail alerts when something critical changes in Active Directory (e.g. membership of security groups). Alerts are sent by e-mail immediately after a change is detected. Alert notification text can be customized and notification templates can include "who", "what", "when", "where" fields and "before" and "after" values for every critical change.
• Subscriptions to any Advanced reports. Before version 7.0, the subscription capability was available only for basic "ad-hoc" reports (daily reports with the full list of changes). The new subscription feature allows to select any available reports, specify report filters, configure schedule (daily, weekly, monthly) and specify report recipients (e-mail addresses).
• Active Directory Snapshot Reporting to report on Active Directory contents (AD "snapshots"), such as "All Members of Domain Admins group", "All Security Groups in AD" etc. You can report both on the current state and on historical data (e.g. "All members of Domain Admins group as of December 31, 2008").
• All reports were extended with 'Where' field. The field value reflects a domain controller name where the change was made.
• Integration with Microsoft System Center Operations Manager via separately available SCOM Management Pack.
• Charts in addition to standard reports - e.g. display changes for a certain time period visually.
• Browsing of Advanced Reports was improved, the new version allows to specify report filters before report generation starts. This improves user experience and saves time.
• Significantly improved and optimized Active Directory change tracking technology, with less overhead on domain controllers and much better performance.
• Precise tracking of AD attributes changed and reverted back during the same day (before 7.0 it was limited). For example, if an attribute's initial value was A, then it was changed to B and after several hours - to C, the new version will report on these changes in detail, with all intermediate attribute values. Note: all the intermediate attribute values will be reported if the time interval between changes made to the attribute is at least 10 minutes.
• Improved reliability and error diagnostics: administrators are immediately notified about audit data processing issues.
• Custom Report Builder for easy creation of custom reports. This allows customers to create their own reports on Active Directory changes and snapshots.
• Performance optimization of SQL database operations for better scalability in large Active Directory environments.
• Simplified management of installed license codes for Netwrix products.
• Automatic Advanced Reporting installation and configuration locally for Windows Vista, Windows Server 2008 and above.
• Ability to send e-mails through SMTP server with SSL support (including the implicit SSL mode).
• User interface improvements in Netwrix Management Console.
• Improved reliability of Netwrix Management Console.
• Easy to use taskpad with most frequent operations on the Welcome page of Netwrix Management Console.
• Active Directory Object Restore Wizard now restores users and computers with their passwords preserved. The feature makes these objects fully functioning as before they were deleted without the need to reset a user's password or rejoin computers to the domain. Note: additional configuration of the Active Directory Schema Container is required for the feature to work properly, please see the documentation for more information.

Netwrix Change Reporter for System Center Virtual Machine Manager:

• Auditing of WHO made changes into System Center Virtual Machine Manager configuration and WHEN those changes were made, in addition to auditing of WHAT was changed.
• All audit reports now include human friendly descriptions for changes, describing what specific changes actually mean (what actually happened), listed in the Details column. Examples of descriptions: "Remove checkpoint" or "Change properties of virtual machine".
• Full support for SC VMM 2008 R2.
• The ability to generate audit reports for arbitrary time frames, not limited to timestamps of collected configuration snapshots.
• Minor typical fixes.

Netwrix File Server Change Reporter:

• Sends e-mail reports as attached CSV files (can be switched back to HTML).
• Many minor typical fixes and updates.

Netwrix Logon Reporter:

• Audit collection from member servers and workstations (in addition to domain controllers), with ability to limit the scope by organizational unit or computer name.
• Customizable event filters by logon type (interactive, network, batch, service ,unlock, network clear text, new credentials, remote interactive, cached interactive), category (users logon/logoff, password changes, password resets, account lockouts, account unlocks), and user.
• Improved reports: computer names from where logons were performed, logon failure reason, charts showing breakdown of logon types etc.
• Improved database import performance.
• Network traffic compression is now available in the Freeware Edition.
• Filter by computer name in Logon Event Viewer.

Netwrix Network Infrastructure Change Reporter:

• Auditing of configuration changes in SNMP-enabled network devices: what settings were changed and where.
• Automatic discovery of new devices and detection of disappeared devices within given IP ranges.
• Reporting of what was changed (configuration setting names) as well as previous and new configuration values.
• Scheduled reports automatically sent by e-mail to designated administrators.
• Out of the box support for common device types and the ability to import MIB files for any other devices.
• Filtering of changes by setting name (e.g. exclude settings that change too frequently and clutter reports).

Netwrix Non-owner Mailbox Access Reporter for Exchange:

• Option to send non-owner access reports as CSV file attachments.
• Option to export non-owner access reports to CSV format.
• Option to filter out certain mailbox access event types.
• Minor typical fixes and updates.

Netwrix Server Configuration Change Reporter:

• Added tracking of changes to scheduled tasks.
• Many typical fixes and updates.

Netwrix SharePoint Change Reporter:

• Support for distributed network environments via optional remote data collection.
• Now it`s not necessary to install the product on the same server where SharePoint server is installed.
• Ability to compress the data being transferred over the network.
• Many typical fixes and updates.

Netwrix SQL Server Change Reporter:

• Auditing of database backup and restore operations.
• Auditing of changes made to database functions.
• Misc typical fixes and updates.

Netwrix VMware Change Reporter:

• Change auditing for new types of VMware configuration objects: Alarm, Cluster, Firewall Port, and Storage Path Selection.
• Several typical fixes.

Version 1.0, released on May 7, 2010 - Initial release with the following products included:

• Netwrix Active Directory Change Reporter
• Netwrix Change Reporter for System Center Virtual Machine Manager
• Netwrix Exchange Change Reporter
• Netwrix File Server Change Reporter
• Netwrix Group Policy Change Reporter
• Netwrix Server Configuration Change Reporter
• Netwrix SharePoint Change Reporter
• Netwrix SQL Server Change Reporter
• Netwrix VMware Change Reporter