Auditing changes to custom attribute

Welcome Forums General PowerShell Q&A Auditing changes to custom attribute

Viewing 3 reply threads
  • Author
    Posts
    • #208122
      Participant
      Topics: 1
      Replies: 1
      Points: -7
      Rank: Member

      All of our users have a custom attribute. Is it possible to use Powershell to see when that attribute was last modified?

    • #208140
      Participant
      Topics: 12
      Replies: 1622
      Points: 2,560
      Helping Hand
      Rank: Community Hero

      An custom attribute in…a car, a plane, a flying man, Active Directory, Powershell object?

    • #208170
      Participant
      Topics: 1
      Replies: 1
      Points: -7
      Rank: Member

      Oops. Sorry first post., but I guess that would help. It is a custom attribute in Active Directory called bannerid. It is populated when the account is created. This attribute is used to authenticate into another system via CAS. However, I need to know if that value has changed. The concern is someone  could change that value in bannerid to impersonate another user when accessing the other system. I can pull when the account object is created and last modified, but I really need to when or if bannerid was changed.

      Thanks

       

       

    • #208179
      Participant
      Topics: 6
      Replies: 93
      Points: 427
      Helping Hand
      Rank: Contributor

      This one got my curiosity up. So, I loaded Apache Directory Studio, found a custom attribute, and in Studio, if you select the properties of that attribute, there is a value for Create and Modify shown as “Create TimeStamp” and “Modify TimeStamp”. I also had to select “Fetch Operational Attributes” before the timestamps actually showed up . Getting that info from PowerShell is above my pay grade. Perhaps Rob can figure this one out. I would think if Directory Studio can figure it out, PS can as well.

Viewing 3 reply threads
  • You must be logged in to reply to this topic.