Auditing / Logging each and every change made to server

[Raffye.Memon]

Hello,

 

we are being trying to audit/log all changes made to server with user changing those.. ! user login and log-off periods.. !

 

windows event do have some information about logins and changes made but they do not provide much information about the changes make to our domain-server , exchange and skype server .. ! 

 

is there a way to do that ..  thoughts.. !  ?

 

Thanks,

 

-RM

[ITOps]

• Make sure you are running the latest version of Windows Server 2016.
• Be sure that you have added sufficient fast storage for logging.
• Insure that you make a backup of the machine and group policy configuration before continuing.
• Review the items and their possible impact on system performance.
• Open up group policy management and insure you are applying the policy to the Forest, and domains for the Domain Controllers OU (Default Domain Controllers Policy) and the Default Domain Policy or policy that is being enforced on other servers and clients in their respective OU.  If you want this across multiple forests you will need to do this as an enterprise domain administrator
• Insure that you have applied the below settings to the computers and the domain controller policies and that they are enforced.
• Note that if you do not have sufficient fast storage and network that enabling all of these items can turn into a very bad situation.
• Insure Success and Failure is checked in Local Computer Policy -> Computer configuration -> Windows Settings -> Security Settings -> Local Policies -> Audit Policy
• Read the warning in the following to insure it is applied if necessary then insure that you enable success and failure auditing for the items under Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Advanced Audit Policy Configuration