This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Check Membership of a Custom Security Group on File Server

I am needing to create a monitor with a filter condition that would query a custom local security group on a file server.

I know that using a Active Directory domain group or even a SEM group would be easier and probably even suggested, but due to some constraints in my environment, that solution does not give me the results i am looking for in response times.

I have tested the monitor I have created with both Active Directory domain groups or even a SEM groups and it works great, so I know the logic of my monitor is good, I was wondering if a local group could be used in their place.

Has anyone had any experience with using server local security groups in this way?

Parents
  • What information do you need to monitor for the Local Security Groups? There's some Event ID's that specifically related to Local Security Groups, for example Event ID 4732​ will tell you that a user has been added to a local security group. You you then build filters in SEM to capture those events, and include the group name in the filter also if needed.

Reply
  • What information do you need to monitor for the Local Security Groups? There's some Event ID's that specifically related to Local Security Groups, for example Event ID 4732​ will tell you that a user has been added to a local security group. You you then build filters in SEM to capture those events, and include the group name in the filter also if needed.

Children