Solved

find audit of users removed from admin group

Posted on 2011-02-15
4
443 Views
Last Modified: 2012-08-14
does event viewer track when users are removed from admin group in OS R2? if so, where can we find it?

thanks
0
Comment
Question by:anushahanna
  • 2
  • 2
4 Comments
 
LVL 5

Accepted Solution

by:
alreadyinuse earned 500 total points
ID: 34903397
If you are talking about 2008 R2 it would be in the security event log if AD auditing is enabled and if you are talking about the AD administrators group as the group where the user was removed from.
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34903472
how can i confirm if AD auditing is enabled? and what would the event name be?
0
 
LVL 5

Assisted Solution

by:alreadyinuse
alreadyinuse earned 500 total points
ID: 34903512
0
 
LVL 6

Author Comment

by:anushahanna
ID: 34908528
thanks alreadyinuse- it helped to set it up.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question