Compliance
Compliance Table of Contents 1. Introduction... 2 2. Purpose of this Document... 2 3. FISMA Compliance... 3 4. GLBA Compliance... 4 5. HIPAA Compliance... 5 6. PCI Compliance... 6 7. SAS Compliance... 7 8. SOX Compliance... 7 9. Support... 9 10. Trademarks... 9 1. Introduction Welcome to the Compliance document of LepideAuditor. This solution provides a comprehensive means of auditing Active Directory, Group Policy, Exchange Server, SharePoint, SQL Server, Exchange Online, Windows File Server, and NetApp Filer. It also lets you manage User Password Expiration Reminders, cleanup Active Directory, and perform Permission Analysis. 2. Purpose of this Document LepideAuditor comes with numerous predefined compliance reports. These reports can be browsed through Compliance section of Audit Tab and Web Console. These can be majorly divided into the following parts. 1. FISMA Compliance 2. GLBA Compliance 3. HIPAA Compliance 4. PCI Compliance 5. SAS Compliance 6. SOX Compliance These reports can be scheduled to be delivered through email to the specific recipients on periodic intervals. 2017 Lepide Software Pvt. Ltd. Page 2
Compliance 3. FISMA Compliance These reports let your server components compliant with the rules of FISMA Compliance. LepideAuditor generates the following reports in this category. Audit Policy Password Policy Password Age Policy Password Complexity Policy Password Encryption Policy Password History Policy Logon Hour Expiration Policy Force Logoff Policy Account Lockout Policy Lockout Duration Policy Enforce User Logon Restrictions Policy Idle Time to Suspend Inactive Sessions Policy Enforce Logon Policy This report shows all modified audit policies. This report shows all modified password policies. This report shows all modified password age policies. This report shows all modified password complexity policies. This report shows all modified password encryption policies. This report shows all modified password history policies. This report shows all modifications made to the logon hour expiration policy. This report shows all modifications made to the logoff policy. This report shows all modified account lockout policies. This report shows all modified lockout duration policies. This report shows all modifications made to the user logon restriction policy. This report shows all modifications made to the Idle Time to Suspend Inactive Sessions Policy. This report shows all modifications made to the enforce logon policy. 2017 Lepide Software Pvt. Ltd. Page 3
Compliance Object's Dial-in Attribute User Expiry Workstation Restrictions Trust Policy Rename Administrator and Guest Policy This report shows all modifications made to the object's dial-in attribute. This report shows the user accounts with the modified expiry date in all added server components. This report shows all modifications made to the workstation restriction. This report shows all modifications made to the domain trusts. This report shows all modified rename administrator and guest policies. 4. GLBA Compliance These reports let your server components compliant with the rules of GLBA Compliance. LepideAuditor generates the following reports in this category. All in Group Policy File Permission Interactive Logon Policy Shared Folder This report shows all modified group policies. This report shows all modified file permissions. This report shows all modified interactive logon policies. This report shows all modified shared folders in all added server components. You can select the component for which you want to see this report. 2017 Lepide Software Pvt. Ltd. Page 4
Compliance 5. HIPAA Compliance These reports let your server components compliant with the rules of HIPAA Compliance. LepideAuditor generates the following reports in this category. Computer's Network Access Policy Object's Dial-in Attribute User Expiry Shared Folder All Object Permissions User Deleted User Status Changed User's Logon Hours Attribute Computer Users Created User Password Reset and Changes Attempted This report shows all modified Computer's Network Access policies. This report shows all modifications made to the object's dial-in attribute. This report shows the user accounts with the modified expiry date in all added server components. This report shows all modified shared folders in all added server components. You can select the components for which you want to see this report. This report shows all modified object permissions in all added server components. This report shows all deleted users in all added server components. You can select the components for which you want to see this report. This report shows the users with the modified status such as enabled, disabled, locked, or unlocked in all added server components. You can select the components for which you want to see this report. This report shows all modifications made to the user logon hour attribute. This report shows all modified computers. This report shows all created users in all added server components. You can select the components for which you want to see this report. This report shows the users who attempted to reset or change their passwords. 2017 Lepide Software Pvt. Ltd. Page 5
Compliance 6. PCI Compliance These reports let your server components compliant with the rules of PCI Compliance. LepideAuditor generates the following reports in this category. Audit Policy User Expiry Workstation Restrictions Trust Policy All in Group Policy Shared Folder All Object Permissions User Status Changed Computer Computer Created Group Files and Folders Deleted Read Successful Failed Changed Attempts Read Failed This report shows all modified audit policies. This report shows the users with the modified expiry date in all added server components. This report shows all modifications made to the workstation restrictions. This report shows all modifications made to the domain trusts. This report shows all modified group policies. This report shows all modified shared folders in all added server components. You can select the components for which you want to see this report. This report shows all modified object permissions in all added server components. This report shows the users with the modified status such as enabled, disabled, locked or unlocked in all added server components. You can select the components for which you want to see this report. This report shows all modified computers. This report shows all created computers. This report shows all modified groups in all added server components. You can select the components for which you want to see this report. This report shows all deleted files and folders. This report shows all successful attempts to read the files. This report shows all failed attempts to change the file. This report shows all failed attempts to read the files. 2017 Lepide Software Pvt. Ltd. Page 6
Compliance All in File Server This report shows all modifications in the file server. 7. SAS Compliance These reports let your server components compliant with the rules of SAS Compliance. LepideAuditor generates the following reports in this category. All in Group Policy File Permission Interactive Logon Policy Failed Change Attempts Read Failed Owner Modification Restricted Groups Policy This report shows all modified group policies. This report shows all modified file permissions. This report shows all modified interactive logon policies. This report shows all failed attempts to change the files. This report shows all failed attempts to read the files. This report shows all modifications made to the object ownership in all added server components. This report shows all modified restricted group policies. 8. SOX Compliance These reports let your server components compliant with the rules of SOX Compliance. LepideAuditor generates the following reports in this category. 2017 Lepide Software Pvt. Ltd. Page 7
Compliance All in Group Policy Shared Folder All Object Permissions Computer Computer Created Group Failed Change Attempts All in File Server Schema All in Active Directory All in Exchange Server All in Exchange Online Site User NTDS Connection All Subnet Organizational Unit This report shows all modified group policies. This report shows all modified shared folders in all added server components. You can select the components for which you want to see this report. This report shows all modified object permissions in all added server components. This report shows all modified computers. This report shows all created computers. This report shows all modified groups in all added server components. You can select the components for which you want to see this report. This report shows all failed attempts to change the files. This report shows all modifications made to the file server. This report shows all Active Directory schema modifications. This report shows all modified Active Directory objects. This report shows all modified Exchange Server objects. This report shows all modified Exchange Online objects. This report shows all modified sites. This report shows all modified users in all added server components. You can select the components for which you want to see this report. This report shows all modifications made to the NTDS. This report shows all modifications related to the connection objects. This report shows all modified subnets. This report shows all modified organizational units. 2017 Lepide Software Pvt. Ltd. Page 8
Compliance Mailbox All DNS Zone User Renamed All in SharePoint All in SQL Server This report shows all modified mailboxes. This report shows all modifications made to the DNS Zones. This report shows the renamed users. This report shows all modified SharePoint Server objects. This report shows all modified server and database objects of SQL Server. 9. Support If you are facing any issues whilst installing, configuring or using the solution, you can connect with our team using the below contact information. Product experts USA/Canada: +1-800-814-0578 UK/Europe: +44 (0) -845-594-3766 Rest of the World: +91 (0) -991-004-9028 Technical gurus USA/Canada: +1-800-814-0578 UK/Europe: +44(0)-800-088-5478 Rest of the World: +91(0)-991-085-4291 Alternatively, visit http://www.lepide.com/contactus.html to chat live with our team. You can also email your queries to the following addresses: sales@lepide.com support@lepide.com To read more about the solution, visit http://www.lepide.com/lepideauditor/. 10. Trademarks LepideAuditor, LepideAuditor App, LepideAuditor App Server, LepideAuditor (Web Console), LepideAuditor Logon/Logoff Audit Module, LepideAuditor for Active Directory, LepideAuditor for Group Policy Object, LepideAuditor for Exchange Server, LepideAuditor for SQL Server, LepideAuditor SharePoint, Lepide Object Restore Wizard, Lepide Active Directory Cleaner, Lepide User Password Expiration Reminder, and LiveFeed are registered trademarks of Lepide Software Pvt Ltd. All other brand names, product names, logos, registered marks, service marks and trademarks (except above of Lepide Software Pvt. Ltd.) appearing in this document are the sole property of their respective owners. These are purely used for informational purposes only. 2017 Lepide Software Pvt. Ltd. Page 9
Compliance Microsoft, Active Directory, Group Policy Object, Exchange Server, Exchange Online, SharePoint, and SQL Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. NetApp is a trademark of NetApp, Inc., registered in the U.S. and/or other countries. 2017 Lepide Software Pvt. Ltd. Page 10