Mastering Active Directory - Second Edition

Auditing capabilities

Setting up advanced security policies will not be enough to protect your identity infrastructure. Periodic audits will help you to understand new security threats. Active Directory allows you to capture and audit events occurring in your identity infrastructure. These could be related to user authentication, directory service modifications, or access violation. It also helps you to collect data from a centralized location, which will help you to troubleshoot authentication and authorization issues in an effective manner.