Solved

Checking user added and removed from administrator group in windows

Posted on 2009-05-14
2
265 Views
Last Modified: 2012-05-07
Hi,
I'm looking for method that we can trace previous removed and added user in windows administrator group, will this be possible to trace?
0
Comment
Question by:motioneye
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 15

Expert Comment

by:Rob Stone
ID: 24393636
You might want to look into the windows auditing features.

Depending on what level you are looking at you will need some extensive space for log files though.
0
 
LVL 11

Accepted Solution

by:
Dmitriy Ilyin earned 500 total points
ID: 24393639
Easy way to monitor this with mail.
all you needed it's
1. PowerShell - http://www.microsoft.com/windowsserver2003/technologies/management/powershell/default.mspx
2. Powershell extension - http://www.quest.com/activeroles-server/arms.aspx
3. Script
4. Sheduled task.

Script you can find below.
Get-QADGroupMember -Identity "Domain admins" | FT Name > C:\members.txt
 
###change the mail message values in this section
$FromAddress = "Administrator@**.**"
$ToAddress = "D.Ilyin@**.**"
$MessageSubject = "Group Membership Report"
$MessageBody = "Attached is the current list of mailbox sizes."
$SendingServer = "srvex1.**.**"
 
###Create the mail message and add the text file as an attachment
$SMTPMessage = New-Object System.Net.Mail.MailMessage $FromAddress, $ToAddress, $MessageSubject, $MessageBody
$Attachment = New-Object Net.Mail.Attachment("c:\members.txt")
Start-Sleep -s 5
$SMTPMessage.Attachments.Add($Attachment)
 
###Send the message
$SMTPClient = New-Object System.Net.Mail.SMTPClient $SendingServer
$SMTPClient.Send($SMTPMessage)

Open in new window

0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Mac Mail and Office 365. Mac Version 10.9.1 2 99
Cryptolocker decryption tools? 5 82
pinned files stuck win 8.1 6 44
RDS and Office 365 Premium 2 67
Introduction: I have always been a big fan of Windows but my liking towards it is slowly being eroded by the variety of other Applications that I encounter, when I browse the Web. Most of the software available is free and maybe Open Source too. …
The way I use Experts Exchange to assist me in analyzing and diagnosing a problem is I first enter a Verbose Question at Experts Exchange like: Office 2007 will hang when opening and saving files I then launch WordPad (any text editor will do) an…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question