I am using Enterprise Reporter v220.127.116.11000 in an AD assessment. My client would like a report that can show when the latest security update was made to an AD object (including the domain root and OUs/Containers, if possible) and who made the change. I don't see an explicit report that provides this capability. Can such a report be written? If so, I would appreciate any assistance/guidance.
Ian KahnSr. Consultant, Identity and Access ManagementInfraScience, LLCikahn@infrascience.com
Enterprise Reporter is really intended for "state" information on objects - so the state of the ACL at particular points in time. What you are looking for is more of a transactional nature and would be better provided by Change Auditor for Active Directory.
To be fair, ER could tell you the last change date but it's really not great for showing you any kind of history on this sort of thing.
Perhaps a better way to phrase this would have been that my client would like to see the most recent changes made to an object's security settings/ACL. If there is a way to do this in Enterprise Reporter, that would be most helpful.