All Collections
Inspectors
Microsoft Active Directory
Microsoft Active Directory | How are group changes over the last 24 hours determined?
Microsoft Active Directory | How are group changes over the last 24 hours determined?
Updated over a week ago

Details


Liongard looks at replication logs over the last 24 hours where attribute metadata replication has occurred on any of the protected groups. It looks for any linked objects, in this case Groups or Users. It does not pull the actual metadata changes, only linked object changes.

The sync time for group changes are determined by the SDAdminHolder propagation sync setting. This is normally set to 60 minutes, but it can be adjusted by editing your registry setting.
โ€‹
To edit the sync time, use the following command:

REG ADD HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters /V AdminSDProtectFrequency /T REG_DWORD /F /D 600


Note that in the above command, 600 refers to the number of seconds.

Did this answer your question?