remove--user-to-DA.jpg

add-user-to-DA.jpg

<div>
Thanks mkline71, &nbsp;you answer was thorough and complete.
</div>


Thanks mkline71,  you answer was thorough and complete.

<div>
Hmm, unfortunately 632/633 events are not present in our log. &nbsp;Can you tell me what auditing setting we may not have enabled?<br />
<br />
Thanks for your help.<br />

</div>


Hmm, unfortunately 632/633 events are not present in our log.  Can you tell me what auditing setting we may not have enabled?

Thanks for your help.


<div>
<div class="content wysiwyg-content">
Is it possible to see who has modified anything in the domain admins (or any security group)? &nbsp;In particular, I want to see if someone has added themselves to a particular group and then removed themselves.
</div>
</div>


Is it possible to see who has modified anything in the domain admins (or any security group)?  In particular, I want to see if someone has added themselves to a particular group and then removed themselves.

How to audit domain admins group?

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.