History of Permissions in Active Directory

Does Active Directory keep a historical view of what permissions a particular user or security group had over time. Meaning, if say, 4 weeks ago, MyID user account belonged to the XYZ security group, but then two days ago, "somone" removed the XYZ security group from MyID ... does Active Directory keep a log of such actions? If yes, where, how can I see a historical log of a user's group membership?

Who is Participating?
Pete LongConnect With a Mentor Technical ConsultantCommented:
only if auditing was turned on BEFORE the event in which case it will be listed in the security log
Pete LongTechnical ConsultantCommented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.