When was a user put into a group?

Start by launching the out-of-the-box All Events Search.

Select the "Event" column and filter for "Member added to group"

From the middle bar of the user interface (between the events details), select "Related Search" and select "Member added to group"

This will create a Search of just member added to group events.

This should be a good start for you.  You can then tweak the filters on this Search as needed - for example, to focus on the specific group.

Thanks Johnny,

I can see hundreds of Member added to group events. I want to only see the events where a specific user was added to a specific group.

Joe

Once you have your Search for "Member Added to Group", you can then filter on the group by:

1. Select the What tab on the Search properties

2. Select "Add with Events"

3. Select Subsystem | Active Directory

4. Right under where it says object (middle of the dialog), change the filter to "contains" by clicking on the far left of the field.

5. Type some characters in your desired group name

6. Your desired group should show up in the list

8. Select it by clicking on it and then clicking the Add button

9. Click OK

Once you have your Search for "Member Added to Group", you can then filter on the group by:

1. Select the What tab on the Search properties

2. Select "Add with Events"

3. Select Subsystem | Active Directory

4. Right under where it says object (middle of the dialog), change the filter to "contains" by clicking on the far left of the field.

5. Type some characters in your desired group name

6. Your desired group should show up in the list

8. Select it by clicking on it and then clicking the Add button

9. Click OK