Add an entry to Audit Status Messages when an ADR is manually ran
Currently the only way to tell who manually initiated an ADR is to check the SMSProv.log. However, since this log is recreated so frequently it's easy to lose this record. Due to the impact that a rogue ADR can have on an environment, a more reliable way of auditing ADR's that were manually initiated should be added. First idea that comes to mind is creating an Audit Status Message.
Nick Augello commented
Yes we had a ADR modified and it would have been extremely helpful to be able to see in the status message query who and when it was done.
Todd Brauns commented
If an ADR can be run by a subset of users who isn't necessarily as compliant with the guidelines of an organization, this information would be vital for determining who the bad apple is.