Is there a way I can monitor changes to the Domain Administrators Group? I’m on SCOM 2016.
Hi,
of course, check this blog:
1 Like
Or go all out and use SCOM to monitor for breaches:
https://squaredup.com/blog/introducing-the-security-monitoring-management-pack-for-scom/
1 Like
Yes you can, we do it with all our ‘sensitive’ groups on our domain.
But you can shortcut the process by implementing a MP that someone has already done
1 Like
haha. snap at the same moment.
High Five