Windows Server Auditing with Netwrix Auditor

Windows Server auditing and reporting configuration changes

Complete Windows Server Monitoring

Windows Server monitoring settings

Change auditing settings

Below is a list of objects monitored by Netwrix Auditor for Windows Server, including attributes.

The first tier stores audit data in a local SQL database. This not only ensures the data is secure but also allows for fast reporting. The second tier stores audit data for up to 7 years in a file should management or an auditor need to confirm records cover the required amount of time. This one-of-a-kind storage approach means all audit data is both secure and accessible.

  • Computer Name changes including description and Domain/Workgroup
  • Environment variables including type and value
  • General settings including Operating System, Organization, Registered User, Serial Number, Service Pack, Status, Version
  • Remote settings including Remote Desktop settings
  • Startup and recovery settings including Operating System Time Display, Write an Event, Send Alert, Automatically Restart, Dump Type, Dump File, Small Dump Directory and Overwrite values
  • Software installation or removal including version (Who removed the accounting package and what version was it)
  • Services settings and attributes including Service can be paused, Caption, Description, Allow service to interact with desktop, Path to executable, Service Account, Name, Action in case of failed startup, Service Type and Start Mode (Automatic/Manual/Disabled)
  • Settings for Base Board (Hosted Board and Status), BIOS (Primary BIOS and Status), Bus (Bus Type and Status)
  • Cache Memory attributes including Configuration Manager Error Code, Last Error Description, Last Error Code, Purpose and Status
  • CD-ROM drive attributes including Configuration Manager Error Code, Last Error Description, Last Error Code, Media Type, Name, SCSI Bus, SCSI Logical Unit, SCSI Port, SCSI Target ID and Status
  • Device memory status
  • Disk partition attributes and settings including Primary Partition, Size (bytes), Starting offset (bytes)
  • DMA status changes
  • Display Adapter settings and properties including Adapter RAM (bytes), Configuration Manager Error Code, Bits/Pixels, Refresh Rate, Driver Version, Last Error Description, Installed Drivers, Last Error Code, Status, Resolution, Adapter Type
  • Floppy Disk Drive attributes including Configuration Manager Error Code, Last Error Description, Last Error Code and Status
  • Hard Drive attributes and settings including Bytes/Sector, Configuration Manager Error Code, Last Error Description, Interface Type, Last Error Code, Media Loaded, Media Type, Model, Partitions, SCSI Bus, SCSI Logical Unit, SCSI Port, SCSI Target ID, Sectors/Track, Size (bytes), Status, Total Cylinders, Total Heads, Total Sectors, Total Tracks and Tracks/Cylinder
  • I/O status
  • IDE attributes including Configuration Manager Error Code, Description, Last Error Description, Last Error Code and Status
  • Infared attributes including Configuration Manager Error Code, Last Error Description, Last Error Code and Status
  • IRQ status
  • Keyboard Configuration Manager Error Code, Description, Last Error Description, Last Error Code, Layout, Name and Status
  • Logical Disk attributes including Description, File System, Size (bytes) and Status
  • Monitor attributes including Configuration Manager Error Code, Last Error Description, Last Error Code, Monitor Type and Status
  • Network Protocol details including Description and Status
  • Network Adapter values including Adapter Type, Configuration Manager Error Code, Last Error Description, Last Error Code, Network Connection Name, Network Connection Status, Service Name, Status, Default Gateway IP, DHCP Enabled, DHCP Server, DNS Server Search Order, IP Address and MAC Address
  • Parallel ports attributes including Configuration Manager Error Code, Last Error Description, Last Error Code, Status
  • PCMCIA controller attributes including Configuration Manager Error Code, Last Error Description, Last Error Code and Status
  • Physical Memory attributes including Capacity (bytes) and Status
  • Pointing Device attributes including Configuration Manager Error Code, Double-click threshold, Last Error Description, Handedness, Hardware type, Last Error Code, Number of Buttons and Status
  • Printing hardware settings and attributes including Configuration Manager Error Code, Last Error Description, Last Error Code, Port Name, Server Name, Status, Published, Shared, Availability and status of the device, Comment, Default, Description, Hidden, Location, Local, Network and Share Name
  • Processor settings and attributes including Configuration Manager Error Code, Last Error Description, Last Error Code, Max Clock Speed (MHz), Name and Status
  • SCSI settings including Configuration Manager Error code, Description, Last Error Description, Last Error Code and Status
  • Serial Ports settings and attributes including Configuration Manager Error Code, Last Error Description, Last Error Code and Status
  • Sound Devices including their Descriptions, Action in case of failed startup, Start Mode and Status
  • System Driver attributes including Description, Action in case of failed startup, Start Mode and Status
  • System Restore status
  • System Slot attributes including Slot Designation and Status
  • USB Controller attributes and settings including Configuration Manager Error Code, Last Error Description, Last Error Code, Name and Status
  • USB Hub details including Configuration Manager Error Code, Last Error Description, Last Error Code, Name and Status
  • Scheduled tasks settings and attributes including Application, Parameters, Account Name, Creator, Working Directory, Triggers, Description and Enabled
  • Local Groups settings and values including Local Group Descriptions, Names, Status and Members
  • Local User settings and attributes including Description, Disabled, Full Name, Lockout, Name, Password Can Be Changed value, Password Expires setting, Password Required and Status
  • Windows Registry settings including Values and Permissions

All features and benefits of Windows Server auditing >


Interested in Windows Server auditing with Netwrix Auditor?
Please select one of the following options to proceed.

Download Free Trial Request Quote Questions?