Scenario: Users are complaining that they are no longer able to access their corporate email. A Citrix Engineer reviews the Exchange policy and notices the Exchange ActiveSync Host URL has been…

Mei-Ling H.Jun 23, 2026

The question is asking you to find out WHO changed a setting and WHEN, so you need an audit trail for administrator actions, not a device-level event log or a general server log. Option D is correct. The Administrator Operations Report in Citrix Endpoint Management (formerly XenMobile) is specifically designed to log admin-level changes, including who made a configuration change and the exact timestamp. That is exactly what you need here because the Exchange ActiveSync Host URL is a policy-level setting that only an administrator can modify. Option A is wrong because Device Events Reports track device activity and enrollment events, not admin console changes. Option B is a distraction because the Windows Event Viewer on the server would not capture changes made inside the XenMobile admin console. Option C does not make sense here because administrator properties is not a place you go to review a change history. Remember the rule: when a question asks who changed something and when, look for the word "Operations" in the report name, that is your audit log for admin actions in XenMobile.

Ola B.Jun 20, 2026

I thought B was the right call since event viewer is usually my first instinct for tracking down changes on a Windows box, but then I remembered that XenMobile has its own built-in audit trail and the Administrator Operations Report is exactly where you go to see who touched what config and when inside the console. Spin up a lab tenant if you can and make a policy change yourself, then pull that report, it clicks instantly when you see your own action logged there.

Wesley A.Jun 26, 2026

D is right, though "Operations Report" is a bland name for something that specific, watch out for B which feels intuitive but event viewer misses Citrix-level admin actions.

Mateus R.Jun 26, 2026

Administrator properties shows who touched that setting, like a receipt in your wallet.