Event Details
User Activity->Object Access->SharePoint Object Access->ChangeAuditor for SharePoint->Security Groups access->EventID 32 - Member added to security group
EventID 32 - Member added to security group
 Sample:

                                
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: ChangeAuditor for SharePoint
Filtering Field Equals to Value
EventId 32
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 10.10.2000 19:00:00
Who Account or user name under which the activity occured. User logon name YDOM\ii
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Member added to security group" Member added to security group
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Computer DC1
Severity Specify the seriousness of the event. "Medium" Medium
WhoDomain -
WhereDomain -
Result Successful or Failed -
Object Name Member name YDOM\gl
Object Type "SharePoint security group member" SharePoint security group member
Whom -
Group Name SharePoint security group Group name tHE gROUP
Site URL Site URL Site URL http://yj:26939
Member Name Member Name InsertionString13 YDOM\gl
User logon name User logon name InsertionString46 YDOM\ii
Comments
You must be logged in to comment