UEM Change Auditing

[jmatz135]

Does UEM offer any type of auditing of configuration changes?  If not is there a good tool to do this?  I imagine anything that audits NTFS modifications would do this, but what are some good suggestions if anyone has them?

[Pim_van_de_Vis]

You are correct. Since UEM only uses file shares, you would need to audit the access to those files. The changes to the UEM Configuration Share are probably the most interesting.

I don't have experience with tools, but if you Google a lot of options show up.

Maybe this Microsoft article is interesting, since it describes a way to do it with just Microsoft tooling:

Auditing File Access on File Servers – Premier Field Engineering

[ijdemes]

Hi jmatz135​,

I created a blog post that might help you get started.

Auditing the VMware UEM Configuration Share – IVANDEMES