Solved

What are the Event ID's associated with AD Group Modification?

Posted on 2011-09-07
1
351 Views
Last Modified: 2012-05-12
I have software that scans event logs at night and give me reports on that.

Can someone tell me what Event ID's are associated with Adding & Removing users from any groups in Active Directory?

Thanks.
0
Comment
Question by:rdabate
1 Comment
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36496643
You have to have auditing enabled for any of this to work

List of events here   http://blog.powershell.no/2009/10/11/active-directory-group-membership-modifications-report/

Example screenshot of adding a member in my lab (2008 R2)

Thanks

Mike
event-4729.jpg
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question