Skip to main content
Question

logging...

  • February 24, 2011
  • 4 replies
  • 13 views

Forum|alt.badge.img+6

Hi, Is there a way to log all changes and the users that made those changes
to the JSS?

John McLaughlin
Technical Support Specialist
Newton Public Schools

4 replies

Forum|alt.badge.img+24
  • Valued Contributor
  • February 24, 2011

Turn on Change Management.
--
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436


Forum|alt.badge.img+21
  • Contributor
  • February 24, 2011

Mmmmm nope. Audit trail?


Forum|alt.badge.img+21
  • Contributor
  • February 24, 2011

Sure…you could do that. Doesn't that require something else to track that?


Forum|alt.badge.img+24
  • Valued Contributor
  • February 24, 2011

It just dumps the raw sql changes into /var/log by default. It's usually enough to backtrack changes if something goes squirrelly. We have a honeypot or two setup in the static groups that our level 2 people have access to. They look really juicy with things like "DO NOT MODIFY" in the name or software versions of things that aren't released to genpop. We tell them to leave things alone, but with change management and a few honeypots setup, we can verify that they actually are leaving things alone.

j
--
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436