A user account was created earlier this year, and at some point was added to the Domain Admins group - is there anyway for me to find out when it was moved to the Domain Admins group ?
Or are the system logs all there is, and in this case Im probably too late to check (probably overwritten themselves by now).