Event Details
User Activity->Account Management->Group Membership Changes->ActiveRoles Server 6->EventID 1525 - Members added to group.
EventID 1525 - Members added to group.
 Sample:
Members added to group.

Operation GUID: %1
Group name: %2
Parent container: %3
Group object GUID: %4
Members:
               %5
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: EDM Server
Filtering Field Equals to Value
EventId 1525
Source EDM
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime
Who Account or user name under which the activity occured. User
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "Group Member Added" Group Member Added
Where The name of the workstation/server where the activity was logged. Computer
Where From The name of the workstation/server where the activity was initiated from. - 10.10.10.10
Severity Specify the seriousness of the event. "High" High
WhoDomain -
WhereDomain -
Whom Account or user name being managed. Members
Member Name Account name of added/removed group member InsertionString5
Group Type The type of group: security or distribution. -
Group Scope The scope of group: local, global, universal -
Group Name Group name
Group Domain -
Comments
You must be logged in to comment