When was a user put into a group?

I have a scenario where I need to see when a user was added to a certain group. I can't for the life of me figure out how to show only the user and the group member being added. I can see all the events of either the user, or the group, but not ONLY when the user was added to the group. Can anyone help?
Thanks,

Joe

  • Start by launching the out-of-the-box All Events Search.

    Select the "Event" column and filter for "Member added to group"

    From the middle bar of the user interface (between the events details), select "Related Search" and select "Member added to group"

    This will create a Search of just member added to group events.

    This should be a good start for you.  You can then tweak the filters on this Search as needed - for example, to focus on the specific group.

  • Thanks Johnny,

    I can see hundreds of Member added to group events. I want to only see the events where a specific user was added to a specific group.

    Joe

  • Once you have your Search for "Member Added to Group", you can then filter on the group by:

    1. Select the What tab on the Search properties

    2. Select "Add with Events"

    3. Select Subsystem | Active Directory

    4. Right under where it says object (middle of the dialog), change the filter to "contains" by clicking on the far left of the field.

    5. Type some characters in your desired group name

    6. Your desired group should show up in the list

    8. Select it by clicking on it and then clicking the Add button

    9. Click OK

  • I thought some more on this...

    Change the Event filter I suggested above to "User member-of added" and create your new search from that.

    Then, select the What tab.

    Select Edit Event Class

    Check the box beside "Where the new value contains the following text"

    Type some or all of your desired group name

    Click Update Restriction

    Click OK

    Click Add With Events | Active Directory

    Ensure the "This Object" radio button is selected

    Click on "Click here to filter data"

    Change the filter to "contains" by clicking on the far left of the field.

    Type some portion of your desired user name - it should show up in the list if an event for the user was captured

    Click on the desired user name

    Click Add

    Click OK

  • Thanks!

    That got me pointed in the right direction! I'm limited to the web interface but did find that if I add the Event class and click in an invisible place under restriction I can choose free text and enter the group as outlined above.

    Thanks again JohnnyQuest!

    Joe

  • अगर आप दुर्गा माता के आशीर्वाद से जुड़े धार्मिक गीतों और चालीसा के बारे में अधिक जानकारी प्राप्त करना चाहते हैं, तो मेरी वेबसाइट पर एक शानदार संग्रह उपलब्ध है। आप इसे देख सकते हैं: यहाँ।

  • Have you ever wondered about the details regarding how long it takes for someone to die from hanging? It's a topic that many people are curious about, and understanding the factors involved can provide crucial insights. For more information, you can visit this article: How Long Does It Take to Die from Hanging. It offers an in-depth explanation on the topic, shedding light on the science behind it.

  • Если вы ищете подробную информацию о продуктовых ключах для Microsoft Office 365, я рекомендую посетить сайт askanydifference. Там вы найдете все необходимые данные и инструкции по активации. Это отличный ресурс для пользователей Office 365!