Need to create an alert for when domain group membership changes

Posted on 2011-04-19
Last Modified: 2012-06-27
I am using a 180-day trial of Microsoft System Center Essentials 2010.  One of the requirements we have on our list is to be able to receive an email alert whenever domain group memberships change, especially (of course) key groups such as Domain Admins.  We'd like to receive the details of the transaction in the body of the message if possible.

Prior to the download of SCE, I was able to set up a task on one of my 2008 R2 domain controllers to send an email when certain events occur in the security log but it's not able to give me any details of the change, only that one happened.  I have found a few articles detailing having the task actually kick off a PowerShell script to generate a text file with the details, which becomes an attachment to an email.  I'm sure this would work but I'd rather have something more integrated and as a part of the body of the message.

SCE looks like a pretty good product and it has a ton of capabilities but I'm a little discouraged at trying to find a way to perform this basic task.  I have found a few articles on doing it in SCE 2007 but they seem to be just different enough to 2010 to be somewhat incomplete .

Any help will be appreciated.
Question by:CeleritasPrime
    LVL 17

    Expert Comment

    by:Premkumar Yogeswaran

    We are using Quest change Auditor for this task.

    This will push a mail to a group if some one  add any user to specific groups like Domain admins and etc...!

    LVL 4

    Expert Comment

    LVL 1

    Accepted Solution

    Apparently this is not possible natively in Server 2008 but requires some third-party apps.
    LVL 1

    Author Closing Comment

    No alerts are possible apparently.
    LVL 4

    Expert Comment

    You can use tripwire if you want to go for paid applications

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now