When adding "Remove User from Group" script to a real time monitoring such as "Group member added by unauthorized personnel", the script doesn't work.
Add the following parameters (MemberName and HostName) to the script.
To do this, please do the following:
1. Launch Intrust Manager
2. Expand Configuration -> Advanced -> Scripts
3. Right-click on "Remove User from Group" and select Properties
4. In the Parameters section add the following:
4a- Name: HostName
Default Value: %_HostName%
Description: Host name to execute LDAP search on
4b- Name: MemberName
Default Value: %String1%
Description: AD name of the member