Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


xpd

xpd

Im a pirate
10802 posts

Uber Geek

Retired Mod
Trusted
Lifetime subscriber

#91700 19-Oct-2011 12:44
Send private message

A user account was created earlier this year, and at some point was added to the Domain Admins group - is there anyway for me to find out when it was moved to the Domain Admins group ?
Or are the system logs all there is, and in this case Im probably too late to check (probably overwritten themselves by now).




XPD^ / DemiseNZ

 

Blog         Free Games        Twitter      My TradeMe Goodies

 

Pirating in Sea Of Thieves

 

Coming Soon - BBS door games - all the classics!

 

 


Create new topic
jaymz
1096 posts

Uber Geek


  #535149 19-Oct-2011 14:22
Send private message

Possibly a bit late, the only built in way i know of is using the security logs.

More information about how to view the logs are located here: http://www.windowsecurity.com/articles/auditing-users-groups-windows-security-log.html

What level of AD are you running? 2003 or 2008? 2008 has some nice new features in which are worth exploring regarding user auditing and tracking. you can read more about "whats new" here: http://technet.microsoft.com/en-us/library/dd560628(WS.10).aspx

insane
2416 posts

Uber Geek

Trusted
Subscriber

  #535377 19-Oct-2011 23:05
Send private message

xpd: A user account was created earlier this year, and at some point was added to the Domain Admins group - is there anyway for me to find out when it was moved to the Domain Admins group ?
Or are the system logs all there is, and in this case Im probably too late to check (probably overwritten themselves by now).


I guess this is why there should be very few uses who are Domain Admins, also makes finding our who added them easier :) .

It's so tempting to make your normal user account a Domain admin as it makes day\-to-day admin work easy, but very bad practice.

Sadly the logging within windows by default is so poor, quite bizarre given how critical it is. 

 
 
 
 


xpd

xpd

Im a pirate
10802 posts

Uber Geek

Retired Mod
Trusted
Lifetime subscriber

  #535431 20-Oct-2011 08:31
Send private message

Yeah, we only have a few admins - managed to find the info tho, change was only amde in past week so thankfully still appeared in the logs after a lot of searching :)

Thanks guys




XPD^ / DemiseNZ

 

Blog         Free Games        Twitter      My TradeMe Goodies

 

Pirating in Sea Of Thieves

 

Coming Soon - BBS door games - all the classics!

 

 


Create new topic





News »

Huawei launches IdeaHub Pro in New Zealand
Posted 27-Oct-2020 16:41


Southland-based IT specialist providing virtual services worldwide
Posted 27-Oct-2020 15:55


NASA discovers water on sunlit surface of Moon
Posted 27-Oct-2020 08:30


Huawei introduces new features to Petal Search, Maps and Docs
Posted 26-Oct-2020 18:05


Nokia selected by NASA to build first ever cellular network on the Moon
Posted 21-Oct-2020 08:34


Nanoleaf enhances lighting line with launch of Triangles and Mini Triangles
Posted 17-Oct-2020 20:18


Synology unveils DS16211+
Posted 17-Oct-2020 20:12


Ingram Micro introduces FootfallCam to New Zealand channel
Posted 17-Oct-2020 20:06


Dropbox adopts Virtual First working policy
Posted 17-Oct-2020 19:47


OPPO announces Reno4 Series 5G line-up in NZ
Posted 16-Oct-2020 08:52


Microsoft Highway to a Hundred expands to Asia Pacific
Posted 14-Oct-2020 09:34


Spark turns on 5G in Auckland
Posted 14-Oct-2020 09:29


AMD Launches AMD Ryzen 5000 Series Desktop Processors
Posted 9-Oct-2020 10:13


Teletrac Navman launches integrated multi-camera solution for transport and logistics industry
Posted 8-Oct-2020 10:57


Farmside hits 10,000 RBI customers
Posted 7-Oct-2020 15:32









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.