[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 451
  • Last Modified:

find audit of users removed from admin group

does event viewer track when users are removed from admin group in OS R2? if so, where can we find it?

thanks
0
anushahanna
Asked:
anushahanna
  • 2
  • 2
2 Solutions
 
alreadyinuseCommented:
If you are talking about 2008 R2 it would be in the security event log if AD auditing is enabled and if you are talking about the AD administrators group as the group where the user was removed from.
0
 
anushahannaAuthor Commented:
how can i confirm if AD auditing is enabled? and what would the event name be?
0
 
anushahannaAuthor Commented:
thanks alreadyinuse- it helped to set it up.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now