Link to home
Create AccountLog in
Avatar of it-row
it-row

asked on

How do I find out who added a member to the Enterprise Admins security group

I have recently (during a SOX review) discovered that a user account was added to my enterprise admins group in active directory. Can somebody help me find out which NT account added this user to the group.
ASKER CERTIFIED SOLUTION
Avatar of merowinger
merowinger
Flag of Germany image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Unless you are auditing Account Management no events will be recorded

See http://www.windowsecurity.com/articles/Windows-Active-Directory-Auditing.html for a good article on auditing