Help - Does anyone know how to track down changes in AD?

[noah]

Hi -

 

Due to some security issues, we need to know when certain group membership changes happened to some indivdual user accounts in AD. Does anyone know how to find out that information,

 

Many thanks in advance

 

Noah

[deano]

If you looking at past events, then the only way is to hope that the person for setting up the network in the first place had enabled auditing. In this case, the changes would be logged in the event viewer. If auditing had not been enabled, then now is the time to do so

[plexer]

Indeed you need auditing enabled in the first place, is it malicious or possible viral?

 

Ben