Need to create an alert for when domain group membership changes
Posted on 2011-04-19
I am using a 180-day trial of Microsoft System Center Essentials 2010. One of the requirements we have on our list is to be able to receive an email alert whenever domain group memberships change, especially (of course) key groups such as Domain Admins. We'd like to receive the details of the transaction in the body of the message if possible.
Prior to the download of SCE, I was able to set up a task on one of my 2008 R2 domain controllers to send an email when certain events occur in the security log but it's not able to give me any details of the change, only that one happened. I have found a few articles detailing having the task actually kick off a PowerShell script to generate a text file with the details, which becomes an attachment to an email. I'm sure this would work but I'd rather have something more integrated and as a part of the body of the message.
SCE looks like a pretty good product and it has a ton of capabilities but I'm a little discouraged at trying to find a way to perform this basic task. I have found a few articles on doing it in SCE 2007 but they seem to be just different enough to 2010 to be somewhat incomplete .
Any help will be appreciated.