Hi,
I can monitor changes to all groups by filtering event ID 4728 in Security Event Log But is it possible to monitor only the "Domain Admins" Group ?
Thanks
Martin
Monitor Changes to Domain Admin Group (Windows 2008 R2 Domain)
Modified on 2025-06-10 22:17:49 +0200
Disclaimer:
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
Dear Martin
It is possible to filter by user and/or computer, but not by a user group.
Jun, 2016 - Permalink