AD Group changes in X days reporting incorrectly (NETIQKB72553)

  • 7772553
  • 23-Aug-2010
  • 24-Aug-2010

Environment

Netiq Secure Configuration Manager 5.8

Netiq Secure Configuration Manager 5.8 SP1

Situation

The security check AD Group changes within X days was reporting incorrectly. The report was not showing group changes for mixed OS environments.

Resolution

The security check "AD Group changes within X days" was modified so that all security groups (global, domain local, and universal) are reported correctly for DCs of all OS types including Windows 2008 and 2008 R2.  The modified check is available through Autosync.  Download and apply the  NetIQ Security Check Update: Active Directory and Windows Checks (August 2010).

Cause

Please note that Microsoft fixed an issue on Windows 2008 with KB 961099 (also included in Service Pack 2) where the event log description could not be read.  This caused the description field in this check to report "UNKNOWN".

Additional Information

Formerly known as NETIQKB72553