Is there a way to monitor domain admin logins and elevations on a windows server? I have been trying to find a way to email myself if an admin logs in or if someone creates a domain admin within the domain.
1 Like
Is this event recorded in the Windows Event logs (maybe Security)?
Then you could use logwatch and/or the Event console to react on that message.
You can’t create a windows admin admin, that’s not how windows works. You can create a user that is part of the security group domain admins. You should log that of course, and Checkmk can read that
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.