Quest Change Auditor Training

Quest Change Auditor is the on-premises audit and compliance engine for Active Directory, Exchange, Windows File Server, and LDAP. It produces the real-time alerts and tamper-resistant change records that security teams and auditors rely on. For hybrid environments, Change Auditor pairs with Quest On Demand Audit to extend the same correlated view into Microsoft 365 and Entra ID (formerly Azure AD). Together they are the audit layer that fits alongside Quest Identity Security and Resilience for end-to-end hybrid alerting.

The Change Auditor course is available as live instructor-led training (ILT) on the published class calendar, or as self-paced student-led training (SLT) available year-round through the virtual training center.

Change Auditor

Two-day hands-on course covering planning and implementation of Change Auditor across AD, Exchange, Windows File Server (WFS), and LDAP, including hybrid setups with correlated views, Group Policy and sensitive mailbox protection, and built-in real-time alerting and reporting.

• Duration: 2 days instructor-led, or self-paced equivalent
• Audience: security personnel, auditors, and Active Directory, Exchange, and file server administrators
• You will learn to: plan and implement Change Auditor; configure auditing for AD, Exchange, WFS, and LDAP; build correlated hybrid views; protect Group Policy objects and sensitive mailboxes; configure real-time alerts; and generate reports for security and compliance
• Prerequisites: none specified; working knowledge of the audited platforms is recommended
• Tuition: $2,886.50 per student

Register for Change Auditor on qsftraining.com →

Where Change Auditor fits in the Quest portfolio

Change Auditor sits outside the new Quest Security Management Platform but is commonly deployed alongside it. A typical hybrid configuration is Change Auditor on premises, Quest On Demand Audit for the cloud side, and Quest Identity Defense (formerly Security Guardian) for active threat detection across hybrid AD and Entra ID. If your environment is hybrid and you only have one half of that picture today, the training will surface the gaps.

Need help running auditing in production, not just learning it?

LeadThem operates Change Auditor and the surrounding hybrid alerting stack for managed clients across the United States. All of our resources are Quest Certified. See our IT management services or contact us to scope the engagement.

Why train with the LeadThem network

• Quest Software partner since 2005. LeadThem-affiliated training has run alongside the Quest product line since the early Migration Manager days.
• Hands-on, not theoretical. Every ILT and SLT class includes lab time in a working virtual training environment.
• Trained by people who run the product in production. Instructors are practicing consultants who deliver Change Auditor and hybrid audit engagements for real clients.
• Direct line to deployment help. Students who finish a class and decide they want LeadThem to run the actual rollout can reach the engagement team directly.