New answers tagged eventviewer
You can use a script to collect this information. Not as ideal/simple, but it will get the job done. Here is a Powershell script that should work on Windows 7/Server 2008r2 or higher (this code can be further cleaned up on newer Powershell versions, but I have kept it as-is for backwards compatibility): $LogName = ...
The domain controller performed the action. This is part of the SDProp process, which resets the security descriptors of accounts that are members of protected groups. http://blogs.technet.com/b/askds/archive/2009/05/07/five-common-questions-about-adminsdholder-and-sdprop.aspx https://technet.microsoft.com/en-us/magazine/2009.09.sdadminholder.aspx ...
Ah, same thing here. I solved by disabling public access to RDP, allowing only private network connections to the server. Which is, by the way, recommended as soon as you get access to your brand new server.
Top 50 recent answers are included