Solved

find audit of users removed from admin group

Posted on 2011-02-15
4
446 Views
Last Modified: 2012-08-14
does event viewer track when users are removed from admin group in OS R2? if so, where can we find it?

thanks
0
Comment
Question by:anushahanna
  • 2
  • 2
4 Comments
 
LVL 5

Accepted Solution

by:
alreadyinuse earned 500 total points
ID: 34903397
If you are talking about 2008 R2 it would be in the security event log if AD auditing is enabled and if you are talking about the AD administrators group as the group where the user was removed from.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34903472
how can i confirm if AD auditing is enabled? and what would the event name be?
0
 
LVL 5

Assisted Solution

by:alreadyinuse
alreadyinuse earned 500 total points
ID: 34903512
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34908528
thanks alreadyinuse- it helped to set it up.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question