Power Shell question

mcseguy9 · 05-Nov-2009, 04:32 PM #1

Hello everyone. I'm guessing there might be a way to do what I'm looking for using Power Shell. We're running Windows Server 2003 and Exchange 2007 (one domain). We have a mail-enabled universal security group called Managers. A few days ago someone noticed that about 6 intern's accounts had found their way into that group. Is there some sort of Power Shell command I could run to find out when those accounts made their way into that security group?

pjhutch · 06-Nov-2009, 08:30 AM #2

You need to have Auditing of Account Management enabled on your Domain Controllers to record account or group changes in your Domain. Look in the Security Event log on the DC to view them or Powershell

Get-EventLog -logname Security

mcseguy9 · 06-Nov-2009, 01:40 PM #3

Wow, through Power Shell that gives a ton of information. Is there any way to filter it down in some way so there's not so much information?

Tag Cloud
access acer asus bios bsod computer crash driver drivers error ethernet excel freeze gaming google gpu graphics hard drive hardware hdmi internet laptop malware memory monitor motherboard mouse network printer problem ram registry router server slow software sound svchost.exe trojan usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Search
Search for:

Find the solution to yourcomputer problem!

Find the solution to your
computer problem!