Solved

find audit of users removed from admin group

Posted on 2011-02-15
4
441 Views
Last Modified: 2012-08-14
does event viewer track when users are removed from admin group in OS R2? if so, where can we find it?

thanks
0
Comment
Question by:anushahanna
  • 2
  • 2
4 Comments
 
LVL 5

Accepted Solution

by:
alreadyinuse earned 500 total points
ID: 34903397
If you are talking about 2008 R2 it would be in the security event log if AD auditing is enabled and if you are talking about the AD administrators group as the group where the user was removed from.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34903472
how can i confirm if AD auditing is enabled? and what would the event name be?
0
 
LVL 5

Assisted Solution

by:alreadyinuse
alreadyinuse earned 500 total points
ID: 34903512
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34908528
thanks alreadyinuse- it helped to set it up.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now