Regresar
-
Título
Which groups are considered critical in the default "Critical Group Membership changes" search -
Descripción
Which groups are considered Critical in the default "Critical Group Membership changes" search?
-
Causa
"Critical Group Membership" searches will not return changes for all groups, it will only return changes to 'Critical' groups.
-
Resolución
From the "Change Auditor for Active Directory Events Reference.pdf" under 'Forest Configuration' section, you can search the document for "Member Added to Critical Enterprise Group"),
Critical enterprise groups include:
• Server Operators• Print Operators• Network Configuration Operators• Incoming Forest Trust Builders• Backup Operators• Administrators• Account Operators• Cert Publishers• DHCP Administrators• Domain Admins• Domain Controllers• Enterprise Admins• Group Policy Creator Owners• RAS and IAS Servers• Schema Admins