Monitor Changes to Domain Admin Group (Windows 2008 R2 Domain)

Modified on 2025-06-10 22:17:49 +0200

Hi,

I can monitor changes to all groups by filtering event ID 4728 in Security Event Log But is it possible to monitor only the "Domain Admins" Group ?

Thanks

Martin

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

Dear Martin

It is possible to filter by user and/or computer, but not by a user group.

Jun, 2016 - Permalink

Disclaimer:
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.

Monitor Changes to Domain Admin Group (Windows 2008 R2 Domain)

Article CommentsAttention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.

Search

Attention

Related Articles

Article Comments

Attention: This article is a record of a conversation with the Paessler support team. The information in this conversation is not updated to preserve the historical record. As a result, some of the information or recommendations in this conversation might be out of date.