AD Domain Changes For Event Analysis
How does this report work?
The AD Domain Changes report displays Events of this type
Eventlog: SAM
EventID: ^(16408|12297|16652)$
The report finds data if the objects supplied are of type
Active Directory Domain Controller Computer Role
Search for objects which contain their NetBIOS Name
How to use this report?
When run from the Reporting space:
The second column in the search results shows of which type the displayed objects are. Make sure you select objects of type Active Directory Domain Controller Computer Role.
When run from the Monitoring space:
Create a state view or event view by choosing the “Active Directory Domain Controller Computer Role” type.
What Parameters are offered?
Date/Time selection: Allows selecting a relative or fixed date and time range and time zone.
Object: Allows adding objects to run this report for
Base | Microsoft.Windows.Server.AD.Library.Report.EventAnalysis |
Target | Microsoft.Windows.Server.AD.DomainControllerRole |
Accessibility | Public |
Visible | True |
<LinkedReport ID="Report.AD.ADDomainChanges" Accessibility="Public" Base="Microsoft.Windows.Server.AD.Library.Report.EventAnalysis" Visible="true" Target="Microsoft.Windows.Server.AD.DomainControllerRole">
<ParameterBlock xmlns="http://schemas.microsoft.com/mom/reporting/2007/ReportParameterSettings" columns="5">
<Controls>
<Control rowSpan="4" columnSpan="2" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.RelativeDateTimePicker">
<ReportParameters>
<ReportParameter name="TimeZone" binding="TimeZone">
<Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.TimeZone</Prompt>
</ReportParameter>
<ReportParameter name="TimeZoneName" binding="TimeZoneName"/>
<ReportParameter name="StartDate_BaseType" binding="StartDate_BaseType"/>
<ReportParameter name="StartDate_BaseValue" binding="StartDate_BaseValue">
<Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.StartDateTime</Prompt>
</ReportParameter>
<ReportParameter name="StartDate_OffsetType" binding="StartDate_OffsetType"/>
<ReportParameter name="StartDate_OffsetValue" binding="StartDate_OffsetValue"/>
<ReportParameter name="EndDate_BaseType" binding="EndDate_BaseType"/>
<ReportParameter name="EndDate_BaseValue" binding="EndDate_BaseValue">
<Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.EndDateTime</Prompt>
</ReportParameter>
<ReportParameter name="EndDate_OffsetType" binding="EndDate_OffsetType"/>
<ReportParameter name="EndDate_OffsetValue" binding="EndDate_OffsetValue"/>
</ReportParameters>
</Control>
<Control rowSpan="4" columnSpan="3" type="Microsoft.SystemCenter.DataWarehouse.Report.ParameterControl.MonitoringObjectXmlPicker">
<ReportParameters>
<ReportParameter name="ObjectList">
<Prompt>Microsoft.SystemCenter.DataWarehouse.Report.Library!Microsoft.SystemCenter.DataWarehouse.Report.ParameterPrompt.ObjectList</Prompt>
</ReportParameter>
<ReportParameter name="ManagementGroupId" binding="GroupList"/>
</ReportParameters>
</Control>
</Controls>
</ParameterBlock>
<Parameters>
<Parameter Name="EventList">
<Value><Data><Events><Event>16408</Event><Event>12297</Event><Event>16652</Event></Events></Data></Value>
</Parameter>
</Parameters>
</LinkedReport>