Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


xpd



The Overrated Raccoons
8744 posts

Uber Geek
+1 received by user: 1275

Mod Emeritus
Trusted
Lifetime subscriber

Topic # 91700 19-Oct-2011 12:44
Send private message

A user account was created earlier this year, and at some point was added to the Domain Admins group - is there anyway for me to find out when it was moved to the Domain Admins group ?
Or are the system logs all there is, and in this case Im probably too late to check (probably overwritten themselves by now).




XPD / Gavin / DemiseNZ

 

For Free Games, Geekiness and Reviews, visit :

 

Home Of The Overrated Raccoons

 

Battlenet : XPD#11535    Origin/Steam/Epic/Uplay : xpdnz

 

Sea of Thieves Down Under


Create new topic
1048 posts

Uber Geek
+1 received by user: 62


  Reply # 535149 19-Oct-2011 14:22
Send private message

Possibly a bit late, the only built in way i know of is using the security logs.

More information about how to view the logs are located here: http://www.windowsecurity.com/articles/auditing-users-groups-windows-security-log.html

What level of AD are you running? 2003 or 2008? 2008 has some nice new features in which are worth exploring regarding user auditing and tracking. you can read more about "whats new" here: http://technet.microsoft.com/en-us/library/dd560628(WS.10).aspx

2262 posts

Uber Geek
+1 received by user: 360

Trusted
Subscriber

  Reply # 535377 19-Oct-2011 23:05
Send private message

xpd: A user account was created earlier this year, and at some point was added to the Domain Admins group - is there anyway for me to find out when it was moved to the Domain Admins group ?
Or are the system logs all there is, and in this case Im probably too late to check (probably overwritten themselves by now).


I guess this is why there should be very few uses who are Domain Admins, also makes finding our who added them easier :) .

It's so tempting to make your normal user account a Domain admin as it makes day\-to-day admin work easy, but very bad practice.

Sadly the logging within windows by default is so poor, quite bizarre given how critical it is. 

 
 
 
 


Try Wrike: fast, easy, and efficient project collaboration software

xpd



The Overrated Raccoons
8744 posts

Uber Geek
+1 received by user: 1275

Mod Emeritus
Trusted
Lifetime subscriber

  Reply # 535431 20-Oct-2011 08:31
Send private message

Yeah, we only have a few admins - managed to find the info tho, change was only amde in past week so thankfully still appeared in the logs after a lot of searching :)

Thanks guys




XPD / Gavin / DemiseNZ

 

For Free Games, Geekiness and Reviews, visit :

 

Home Of The Overrated Raccoons

 

Battlenet : XPD#11535    Origin/Steam/Epic/Uplay : xpdnz

 

Sea of Thieves Down Under


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Auckland tops list of most vulnerable cities in a zombie apocalypse
Posted 23-May-2018 12:52


ASB first bank in New Zealand to step out with Garmin Pay
Posted 23-May-2018 00:10


Umbrellar becomes Microsoft Cloud Solution Provider
Posted 22-May-2018 15:43


Three New Zealand projects shortlisted in IDC Asia Pacific Smart Cities Awards
Posted 22-May-2018 15:14


UpStarters - the New Zealand tech and innovation story
Posted 21-May-2018 09:55


Lightbox updates platform with new streaming options
Posted 17-May-2018 13:09


Norton Core router launches with high-performance, IoT security in New Zealand
Posted 16-May-2018 02:00


D-Link ANZ launches new 4G LTE Dual SIM M2M VPN Router
Posted 15-May-2018 19:30


New Panasonic LUMIX FT7 ideal for outdoor: waterproof, dustproof
Posted 15-May-2018 19:17


Ryanair Goes All-In on AWS
Posted 15-May-2018 19:14


Te Papa and EQC Minecraft Mod shakes up earthquake education
Posted 15-May-2018 19:12


Framing Facebook: It’s not about technology
Posted 14-May-2018 16:02


Vocus works with NZ Police and telcos to stop scam calls
Posted 12-May-2018 11:12


Vista Group signs Aeon Entertainment, largest cinema chain in Japan
Posted 11-May-2018 21:41


New Privacy Trust Mark certifies privacy and customer control
Posted 10-May-2018 14:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.