|
|
|
Forum Newbie
      
Group: Forum Members
Last Login: 8/6/2009 4:57:16 PM
Posts: 1,
Visits: 0
|
|
| Event 4732 | 4733 | 4746 | 4747 Why not return the name of the user who has been added to / or removed from a Local Group? Yes, it's provided in the Security ID... provided the tool you are using translates the SID. If not, you are forced to do a SID lookup to know who was added or removed from the group. I would like to know why the Account Name is being returned as a Dash ( - )? Or, is it a bug? -SteveB
|
|
|
|
|
Expert
      
Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 324,
Visits: 0
|
|
| can you email/post some examples?
|
|
|
|
|
Expert from Quest Software
      
Group: Forum Members
Last Login: 11/3/2011 10:13:06 PM
Posts: 13,
Visits: 7
|
|
| Hey SteveB - are you referring to the "user" field? Please post a screenshot. Thanks!
|
|
|
|
|
Forum Newbie
      
Group: Forum Members
Last Login: 11/24/2011 7:47:48 AM
Posts: 2,
Visits: 0
|
|
|
|
|
|
Expert
      
Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 324,
Visits: 0
|
|
| Wierd, for that user account, what is it's logon name and display name?
|
|
|
|
|
Forum Newbie
      
Group: Forum Members
Last Login: 11/24/2011 7:47:48 AM
Posts: 2,
Visits: 0
|
|
| The logon name is "testaccount". For the display name (I suppose this is the full name), it is also "testaccount".
|
|
|
|
|
Genius
      
Group: Forum Members
Last Login: 12/22/2011 4:55:21 PM
Posts: 8,
Visits: 3
|
|
| Hi, Event 4732 are generated with "local groups" and "domain local groups". On local groups only show field "security id" with "Sid" or Netbios Account Name if server can translate (99%) On Domain Local Groups: Use Field "security ID" with "Sid" or Netbios Account Name and field "Account Name" with LDAP Distinguised Name. Regards Javier Carrera
|
|
|
|