Security_Group_Changes

Project Notes

This plugin checks the security log for any changes to group membership. If detected it will spool the results in a text file in the same directory as the script. This also holds the last date/time run stamp (critical to making this run quicker). Security Auditing must be turned on. this will work on Active Directories (where I use it the most). This should work for any windows machine from 2000 to 2012 R2+. The -k keyword is overloaded and will build an array off multiple values. An Example of how I use this: groupcheck.vbs -k "Domain Admins" -k "Administrators" -k "Enterprise Admins" *** updated 2018-03-18 Changed to write the date / spool file all at once. added remote host check option (-h) -h defaults to the localhost unless specified Please let me know if this was helpful or if it does not work. Use at your own risk!