Event Details
User Activity->Account Management->Group Membership Changes->Active Roles 7 or higher->EventID 2604 - Object added to group with temporal membership.
EventID 2604 - Object added to group with temporal membership.
 Sample: 
An object successfully added to the group in accord with the object's temporal group membership settings.

Operation ID: 1-12

Operation GUID: 3b35fa0b-0320-493b-a8c8-b5124a9f1aee

Object name: Cecil Brown

Object parent container: research.corp/Users

Group name: Accounting_distrib

Group parent container: research.corp/Project Managers

Temporal group membership start time: 10/22/2009 8:00:00 PM
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: ARAdminService
Filtering Field Equals to Value
Source ARAdminSvc
EventId 2604
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. - 1/1/2000
Who Account or user name under which the activity occured. User RESEARCH\Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Object added to group with temporal membership" Object added to group with temporal membership
Where The name of the workstation/server where the activity was logged. - 10.10.10.10
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. - High
WhoDomain -
WhereDomain -
Whom Account or user name being managed. Whom Cecil Brown
Member Name Account name of added/removed group member InsertionString3 Cecil Brown
Group Type The type of group: security or distribution. -
Group Scope The scope of group: local, global, universal -
Group Name Group name Accounting_distrib
Group Domain -
Comments
You must be logged in to comment