System Center 2012 Configuration Manager Unleashed

Auditing ConfigMgr Administrative Actions

Ensure audit trails for all security sensitive actions are properly preserved and that regular audits of your IT environment review ConfigMgr activity. Any environment will include some group of individuals with authority to carry out those actions required to administer information systems. Although you cannot generally block the administrative group from all opportunities to misuse their authority, increasing the chance of detection acts as a strong deterrent and reduces the chance of repeated or ongoing breaches of security taking place. Auditing is an area in which separation of duties should be strictly enforced; you should not rely on the administrators responsible for normal operations as the sole ...