svindler has it right. I'd add a suggestion to enable Real-Time Change Detection on NCM. That, combined with TACACS accounting & reporting, will show who did what, and when they did it. Plus you'll get a notification as soon as the command is implemented, courtesy of Real-Time Change Detection.
↧