Retour
-
Titre
What does the "Nested member added to group" event mean? -
Description
"Nested member added to group" and "Nested member removed from group" events are recorded with details similar to the following:What: Domain\User1 was added to group BUILTIN\Administrators as an indirect member of nested group CN=Domain Admins,CN=Users,DC=Domain,DC=com.How are these events generated? -
Cause
By default, when you nest a group within another group, user rights are inherited. For example, if you make BUILTIN\Administrators a Member Of Domain Admins, users in Domain Admins have the same permissions as the users in BUILTIN\Administrators group. -
Résolution
The "Nested member added to group" indicates that a user is a now a (nested) member of a group due to being listed on the "Member Of" tab on the original group the user was added to.For example, Domain\User1 was added to Domain Admins (CN=Domain Admins,CN=Users,DC=Domain,DC=com) which then inherits the permissions of BUILTIN\Administrators group.