The Management History feature provides information on who did what and when it was done with regard to the Active Directory management tasks performed using Active Roles.
This feature gives you a clear log documenting the changes that have been made to a given object, such as a user or group object. The log includes entries detailing actions performed, success or failure of the actions, as well as which attributes were changed.
By using the Management History feature, you can examine:
- Change History Information on changes that were made to directory data via Active Roles.
- User Activity Information on management actions that were performed by a given user.
- The reports produced by the Change History or User Activity command include information only about the changes that were made using a certain group of Administration Services (those Services that share a common database). As the Active Roles console or Web Interface automatically selects the Service to connect to, you may encounter different reports for the same target object or user account during different connection sessions.
Active Roles uses the Management History storage to hold approval, temporal group membership, and deprovisioning tasks. Without synchronizing information between Management History storages, such a task created by one of the Administration Services may not be present on other Administration Services. As a result, behavior of the Active Roles console or Web Interface varies depending on the chosen Administration Service.
Both Change History and User Activity use the same source of information—the Management History log, also referred to as the Change Tracking log. The configuration settings of the Change Tracking log are discusses later in this chapter (see Management History configuration).
Active Roles also includes reports to examine management history by collecting and analyzing event log records (see Active Roles Reporting earlier in this document). However, the process of retrieving and consolidating records from the event log may be time-consuming and inefficient.
For more information on the impact of change on the Management History database, see the Impact on management history data topic in Active Roles What's New Guide.