Tracking Active Directory and Group Policy Changes for SOX Compliance


Published on

NetWrix Customer Success Story

Published in: Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Tracking Active Directory and Group Policy Changes for SOX Compliance

  1. 1. NetWrix Customer Case Study Tracking Active Directory and Group Policy Changes for SOX Compliance “NetWrix Active Directory Change Reporter has enabled me to provide accurate visibility regarding what changed when.”Customer: Kathryn J. Roxby, IT Systems Administrator Sr.L-3 Electron Technologies DivisionWeb Site: In order to comply with SOX regulations, the L-3 Technologies Division’s IT department was burdened withNumber of Users: 800 the strenuous task of tracking and auditing significant eventsIndustry: Aerospace and Defense taking place within its IT infrastructure. Understanding the strict penalties and unwanted stigma that result fromSolutions:Change Auditing failed SOX audits, as well as the need to document allCompliance modifications in order to investigate unwanted changes, the IT department was in search of a solution that would provideProducts: its administrators with simple and effective change auditingActive Directory Change ReporterGroup Policy Change Reporter capabilities.Vendor: Challenge: Undocumented AD Changes and SOX Audits on theNetWrix Corporation HorizonPhone: 888-638-9749 Undocumented changes to Active Directory and or Group Policy settingsWeb Site: are often the cause of failed compliance audits. Moreover, these unknown modifications leave many IT administrators in the dark as to why unwantedCustomer Profile: changes have occurred within their IT infrastructure. Knowing exactlyL-3 Communications is a prime federalgovernment contractor in Command, what Active Directory changes have occurred at all times is the only way toControl and Communications, ensure adherence to SOX regulations while supplying the internal controlIntelligence, Surveillance and that AD administrators need in order to keep their infrastructure secure.Reconnaissance, Government Without NetWrix, the L-3 Electron Technologies Division struggled to findServices, Aircraft Modernization and an efficient solution that provided the IT department with the visibility itMaintenance, and has the broadest needed into Active Directory and Group Policy changes.base of Electronic Systems in theindustry. L-3 is also one of the largest Solution: NetWrix Active Directory Change Reporterproviders of homeland defense Fortunately, NetWrix Active Directory Change Reporter was able toproducts and services for a variety of provide a quick and painless solution that solved its most pressing concerns.emerging markets. Copyright © NetWrix Corporation. All rights reserved.
  2. 2. NetWrix Customer CaseCase NetWrix Customer Study StudyAfter searching for a product that would provide the Active Directory changes, organizations are puttingvisibility and auditing capabilities necessary to meet themselves at risk for failed SOX audits and dangerousits needs, the L-3 Electron Technologies Division’s IT security breaches. As the L-3 Electron Technologiesdepartment landed on NetWrix and hasn’t regretted it Division has seen firsthand,since. NetWrix Active Directory Change Reporter prevents“I tried some other solutions, such as Prism such IT disasters by lending a bird’s eye view toMicrosystems® EventTracker®, to set up automated the administrators responsible for IT infrastructurereports regarding security success and failure audits, management.but found them very confusing and difficult toconfigure,” Roxby said. “That’s when I Googled Conclusion:for systems monitoring tools and saw that other NetWrix Active Directory Change reporter was ablecompanies we were familiar with were using NetWrix. to quickly provide the L-3 Electron TechnologiesWhen I tried it for the first time, I was encouraged by Division with an answer for its SOX compliance andhow quickly I was able to get the NetWrix tools up change auditing needs. The NetWrix tool has quicklyand running.” proven invaluable, and the IT department has alreadyAfter installing Active Directory Change Reporter, purchased additional auditing modules from NetWrix,a purpose-built solution for audit reporting that that seamlessly integrate with each other.tracks who changed what, when, and where in “I really like the low system overhead of the NetWrixActive Directory, Group Policy and Exchange, the tools and how easy they are to get up and running,”L-3 Electron Technologies Division finally had Roxby said. “I have been challenged to monitor ourthe visibility it needed to ensure a more stable and Exchange server and file server access more closely,secure infrastructure. The solution sends daily reports and we are currently using the Exchange and Filenotifying the IT department of all changes made with Server modules for change auditing. I am happy todetailed “who, what, when and where” information, as report that these modules are also providing us withwell as before and after values of each modification, valuable information. We are also looking to upgradeallowing administrators to satisfy SOX auditors and to NetWrix SOX Compliance Suite at some point indetect unauthorized and unwanted changes. the future.”“Active Directory Change Reporter has enabled meto provide accurate visibility regarding what changed About NetWrix Corporationwhen”, Roxby said. “We gave a user privileges Established in 2006, NetWrix Corporationto add and remove users from an AD distribution provides innovative and cost-effective solutionsgroup. One day, this user called me complaining that that simplify and automate the management ofsomeone had removed more than half of the users Windows networks. With in-depth knowledge andfrom the distribution group. I scrolled through my experience managing Windows environments ofreports and found that he was the one who deleted all sizes, the company delivers solutions to meetthem—probably by mistake, but nevertheless, mystery complicated business requirements while fulfillingsolved.” the best expectations of IT professionals.Without internal controls and awareness over Copyright © NetWrix Corporation. All rights reserved.