Find your solution!

mcseguy9 · 05-Nov-2009, 03:32 PM #1

Hello everyone. I'm guessing there might be a way to do what I'm looking for using Power Shell. We're running Windows Server 2003 and Exchange 2007 (one domain). We have a mail-enabled universal security group called Managers. A few days ago someone noticed that about 6 intern's accounts had found their way into that group. Is there some sort of Power Shell command I could run to find out when those accounts made their way into that security group?

pjhutch · 06-Nov-2009, 07:30 AM #2

You need to have Auditing of Account Management enabled on your Domain Controllers to record account or group changes in your Domain. Look in the Security Event log on the DC to view them or Powershell

Get-EventLog -logname Security

mcseguy9 · 06-Nov-2009, 12:40 PM #3

Wow, through Power Shell that gives a ton of information. Is there any way to filter it down in some way so there's not so much information?

Tag Cloud
access audio black screen blue screen boot bsod connection crash dell desktop driver drivers dvd email error excel firefox hard drive hardware hijackthis internet keyboard laptop malware monitor motherboard network networking outlook problem recovery router safe mode screen slow sound spyware tdlwsp.dll trojan upgrade vba video virus vista vundo windows windows 7 windows vista windows xp wireless

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Search
Search for: