Can we set up a custom profile to monitor changes made to the local administrator group on a server?

Question

I've been asked to try and come up with a way to monitor if/when the list of users within the Local Administrators Group on a server has changed.

I'm trying to think of a way to do this and I'm not sure if that would be through PowerShell or if there is an easier way to do it with SCM or is it even possible to do within SCM.

Any thoughts?

mesverrum · Accepted Answer

Within SCM you can tell it to run any powershell script you want and it will just retain the results and you can track them for changes over time, so this could be a pretty decent use case. Out of the box there isn't a profile for tracking users yet, but I bet this would be a good feature request to get added in natively. Server configuration profiles

Can we set up a custom profile to monitor changes made to the local administrator group on a server?

Top Replies