Hello,
I currently have some rules that trigger when a group has it membership updated. Is there a way create a matching perimeter that filters out groups that were updated by there own manager using the managedby attribute in Active Directory?
Thanks!
Hi domainAdminsna,
Nice proposal, I think we'll create a story to provide easy way to work with attributes. Meanwhile please try the following draft rules as a temporary solution. They have no additional filters. They do not trigger if a computer account or a managedBy account made a group membership change. They trigger if managedBy cannot be found or resolved.
Find the InTrustPDOImport.exe tool in InTrust installation folder or on DVD and run the following commands on InTrust server box under InTrust admin account:
InTrustPDOImport.exe -import "Group member added by personnel not specified in managedBy attribute.xml"
InTrustPDOImport.exe -import "Group member removed by personnel not specified in managedBy attribute.xml"
Group member added by personnel not specified in managedBy attribute.xml
<?xml version="1.0" encoding="utf-8" ?>
<!--
==============================================================================
Copyright 2018 Quest Software Inc. ALL RIGHTS RESERVED.
$Workfile: Group member added by personnel not specified in managedBy attribute.xml $
$Revision: 0 $
$Modtime: 6/22/2018 07:34:29 $
==============================================================================
THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.
==============================================================================
-->
<ITRTProcessingRule original_parent="\Configuration\Objects\{F81E88B8-5629-4698-AEB7-38731A4B1520}\RuleGroups\{E9BD74C6-A7D7-42D1-82CC-D75758F2FE4D}\ChildGroups\{5FA0B34F-D46F-41D7-B84A-56E8613A339D}\ChildGroups\{11957D17-A7A5-418C-BEB1-6601B4CB59EE}\Rules">
<LimitEventsCount>10</LimitEventsCount>
<SuppressBySeverity>0</SuppressBySeverity>
<Description>This rule is matched when a member (user or group) is added to a security or distribution group by personnel not specified in managedBy attribute of this group.</Description>
<GenerateAlert>1</GenerateAlert>
<AlertInitialState>0</AlertInitialState>
<Name>Group member added by personnel not specified in managedBy attribute</Name>
<Guid>{EEC619B1-4DE3-42B2-8342-940357EB49F3}</Guid>
<MatchCondition>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</MatchCondition>
<AlertSeverity>32</AlertSeverity>
<Enabled>0</Enabled>
<SuppressByAlertCode>0</SuppressByAlertCode>
<Schedule>00000000000000000000000000000000000000000000000000000000</Schedule>
<VendorKnowledgeBase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endorKnowledgeBase>
<ConditionType>{E00EE0F1-B3DF-4122-89B4-738EF5EC1C52}</ConditionType>
<SuppressByName>0</SuppressByName>
<AlertSuppression>0</AlertSuppression>
<CustomerKnowledgeBase>0100000000000000</CustomerKnowledgeBase>
<Distribution></Distribution>
<AlertName>Group member added by personnel not specified in managedBy attribute</AlertName>
<SuppressByRuleID>0</SuppressByRuleID>
<DoNotSaveEvents>0</DoNotSaveEvents>
<SuppressByHostName>0</SuppressByHostName>
<Condition></Condition>
<AlertComment></AlertComment>
<FilterCondition>0100000000000000</FilterCondition>
<AlertDescription>Member %Member Account% added to group %Target Group Domain%\%Target Group Name% by %Operator Account Domain%\%Operator Account Name%.</AlertDescription>
<ScheduleEnabled>0</ScheduleEnabled>
<SuppressBySiteID>0</SuppressBySiteID>
<AlertAssignment></AlertAssignment>
<RuleDistribution>0</RuleDistribution>
<AlertCode>AE_AD_SEC_0009 (3)</AlertCode>
<NotificationFormats>
<ITRTNotificationFormat>
<Guid>{57A34CC9-7D89-4B76-9461-6784F07C7D5E}</Guid>
<ComposerTemplate>01000000F834885B1C14B949960CC37CE508B1D02800000049006E005400720075007300740020002500530065007600650072006900740079002500200061006C0065007200740020002D002000250041006C006500720074002E004E0061006D00650025002E00050000007500740066002D003800E600000025004400650073006300720069007000740069006F006E0025000D000A000D000A0041006C0065007200740020007700610073002000670065006E0065007200610074006500640020006F006E00200063006F006D00700075007400650072002000250041006C006500720074002E0048006F00730074004E0061006D00650025002E000D000A0041006C0065007200740020007700610073002000670065006E006500720061007400650064002000610074002000250041006C006500720074002E00540069006D006500470065006E006500720061007400650064004C006F00630061006C00250020002800250041006C006500720074002E00540069006D006500470065006E006500720061007400650064002500200047004D00540029002E000D000A000D000A0046006F00720020006D006F0072006500200069006E0066006F0072006D006100740069006F006E002C00200066006F006C006C006F0077002000740068006900730020006C0069006E006B003A00200025006F007200670070006100720061006D003A005700450042004D004F004E00490054004F005200550052004C002500250061006C006500720074002E0061006C006500720074006900640025002E00</ComposerTemplate>
<ComposerId>{C40DBB2E-DF56-43AC-8392-EFB2D0DDCC5A}</ComposerId>
<Enabled>1</Enabled>
<NotificationType>{E01E93C2-938C-4BBD-88D9-0FD3B0E631E4}</NotificationType>
</ITRTNotificationFormat>
<ITRTNotificationFormat>
<Guid>{8DF2E932-C044-46AE-A2DE-B726897347CF}</Guid>
<ComposerTemplate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omposerTemplate>
<ComposerId>{C40DBB2E-DF56-43AC-8392-EFB2D0DDCC5A}</ComposerId>
<Enabled>0</Enabled>
<NotificationType>{ECEB8D7E-04D9-49F6-8B38-EB90C97AC523}</NotificationType>
</ITRTNotificationFormat>
</NotificationFormats>
<DataSources>
<ITRTRuleDataSource>
<Guid>{F393A384-F52E-42AA-A83F-4FD8ACB831C8}</Guid>
<DataSourceId>{A8CFC803-CDAD-47C5-B195-4C043A4F4BC7}</DataSourceId>
</ITRTRuleDataSource>
</DataSources>
<ResponseActions>
<ITRTResponseAction>
<ProviderConfig>01000000260000007B00310044004100370045004100310039002D0036003700410039002D0034004300340045002D0041003800350030002D003200380043004600390044004500360031003600450039007D0004000000260000007B00310044003500380038004100310046002D0031003200310035002D0034003800350031002D0042003200360036002D004600330035003200330032003000360045003000310043007D000A000000250043006F006D00700075007400650072002500260000007B00360046004400410044003200390044002D0046003300310044002D0034004100330031002D0042003800320035002D004400430046004300380041003500310037003900310031007D0010000000250043006F006D007000750074006500720044006F006D00610069006E002500260000007B00410033003200380046004300310030002D0041003500330038002D0034003000410032002D0039003800380031002D004300350032003500420033003500370038004200410033007D002900000025005400610072006700650074002000470072006F0075007000200044006F006D00610069006E0025005C0025005400610072006700650074002000470072006F007500700020004E0061006D0065002500260000007B00430038004600310045003900390037002D0030003000420042002D0034004300380035002D0041004100310035002D004500350037003600460036003200430044004200300041007D001000000025004D0065006D0062006500720020004100630063006F0075006E0074002500</ProviderConfig>
<Guid>{06E1CD8A-365E-48B3-8C0F-848A7557D13C}</Guid>
<Timeout>0</Timeout>
<Distribution></Distribution>
<Enabled>0</Enabled>
<ProviderId>{E5D8E6C5-488A-42BF-B636-065E970F0067}</ProviderId>
<ExecutionOrder>1</ExecutionOrder>
<Destination>0</Destination>
</ITRTResponseAction>
<ITRTResponseAction>
<ProviderConfig>01000000260000007B00360042003600310030004600330034002D0032003700310044002D0034003400340046002D0039003600450033002D004500330030004300430041003900340045003800300036007D0002000000260000007B00340031004400420030004500390034002D0031004400310032002D0034004400360030002D0039004600440031002D003800350031004200370036003500440036004100440035007D001700000025004F00700065007200610074006F00720020004100630063006F0075006E00740020004E0061006D0065002500260000007B00460045004600380046004200410038002D0041004200330044002D0034003900430039002D0038003200360031002D003300430042003700440045003500410041003400380033007D001900000025004F00700065007200610074006F00720020004100630063006F0075006E007400200044006F006D00610069006E002500</ProviderConfig>
<Guid>{6DD0FFBA-5803-46F2-9CD1-C5F31CF1794C}</Guid>
<Timeout>0</Timeout>
<Distribution></Distribution>
<Enabled>0</Enabled>
<ProviderId>{E5D8E6C5-488A-42BF-B636-065E970F0067}</ProviderId>
<ExecutionOrder>0</ExecutionOrder>
<Destination>0</Destination>
</ITRTResponseAction>
<ITRTResponseAction>
<ProviderConfig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roviderConfig>
<Guid>{00F78313-7371-4269-BA17-DB6910DA2C68}</Guid>
<Timeout>0</Timeout>
<Distribution></Distribution>
<Enabled>0</Enabled>
<ProviderId>{E5D8E6C5-488A-42BF-B636-065E970F0067}</ProviderId>
<ExecutionOrder>2</ExecutionOrder>
<Destination>0</Destination>
</ITRTResponseAction>
</ResponseActions>
<AlertFields>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{5F85E32D-CCA5-49F7-B7ED-7E17433A6A6B}</Guid>
<FieldValue>%OperatorName%</FieldValue>
<FieldName>Operator Account Name</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{958FC0FF-CA46-4F9B-A60F-943190CA4CA5}</Guid>
<FieldValue>%OperatorDomain%</FieldValue>
<FieldName>Operator Account Domain</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{96F317E4-6485-49DF-B14B-C3496D21D8E5}</Guid>
<FieldValue>%MemberAccount%</FieldValue>
<FieldName>Member Account</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{823BC845-2E8D-4B8A-BA10-D5D5932B4DF0}</Guid>
<FieldValue>%String4%</FieldValue>
<FieldName>Target Group Domain</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{07E608EE-FBB8-4960-A747-F0D12D9C0EC3}</Guid>
<FieldValue>%String3%</FieldValue>
<FieldName>Target Group Name</FieldName>
</ITRTAlertField>
</AlertFields>
</ITRTProcessingRule>
Group member removed by personnel not specified in managedBy attribute.xml
<?xml version="1.0" encoding="utf-8" ?>
<!--
==============================================================================
Copyright 2018 Quest Software Inc. ALL RIGHTS RESERVED.
$Workfile: Group member removed by personnel not specified in managedBy attribute.xml $
$Revision: 0 $
$Modtime: 6/22/2018 07:34:42 $
==============================================================================
THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND,
EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE.
==============================================================================
-->
<ITRTProcessingRule original_parent="\Configuration\Objects\{F81E88B8-5629-4698-AEB7-38731A4B1520}\RuleGroups\{E9BD74C6-A7D7-42D1-82CC-D75758F2FE4D}\ChildGroups\{5FA0B34F-D46F-41D7-B84A-56E8613A339D}\ChildGroups\{11957D17-A7A5-418C-BEB1-6601B4CB59EE}\Rules">
<LimitEventsCount>10</LimitEventsCount>
<SuppressBySeverity>0</SuppressBySeverity>
<Description>This rule is matched when a member (user or group) is removed from a security or distribution group by personnel not specified in managedBy attribute of this group.</Description>
<GenerateAlert>1</GenerateAlert>
<AlertInitialState>0</AlertInitialState>
<Name>Group member removed by personnel not specified in managedBy attribute</Name>
<Guid>{3281E96A-AD3F-4CEE-A46E-6E4C2F4C8B31}</Guid>
<MatchCondition>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</MatchCondition>
<AlertSeverity>32</AlertSeverity>
<Enabled>0</Enabled>
<SuppressByAlertCode>0</SuppressByAlertCode>
<Schedule>00000000000000000000000000000000000000000000000000000000</Schedule>
<VendorKnowledgeBase>01000000FE0000004F006E006C007900200061007500740068006F00720069007A00650064002000610064006D0069006E006900730074007200610074006F00720073002000730068006F0075006C0064002000720065006D006F007600650020006D0065006D0062006500720073002000660072006F006D002000730065006300750072006900740079002000670072006F007500700073002E00200049006600200073006F006D0065006F006E006500200065006C0073006500200064006F00650073002C002000740068006900730020006D0061007900200069006E00640069006300610074006500200061002000700072006F0062006C0065006D002E00200049006E00200073007500630068002000630061007300650073002C00200074006800650020006D006F007400690076006100740069006F006E00200066006F0072002000720065006D006F00760069006E00670020007400680065002000670072006F007500700020006D0065006D00620065007200200069007300200075006E006B006E006F0077006E002E002000570068006100740020006900730020006D006F00720065002C002000740068006500200063006F00720070006F007200610074006500200070006F006C006900630079002000690073002000760069006F006C0061007400650064002000740068006900730020007700610079002E00</VendorKnowledgeBase>
<ConditionType>{E00EE0F1-B3DF-4122-89B4-738EF5EC1C52}</ConditionType>
<SuppressByName>0</SuppressByName>
<AlertSuppression>0</AlertSuppression>
<CustomerKnowledgeBase>0100000000000000</CustomerKnowledgeBase>
<Distribution></Distribution>
<AlertName>Group member removed by personnel not specified in managedBy attribute</AlertName>
<SuppressByRuleID>0</SuppressByRuleID>
<DoNotSaveEvents>0</DoNotSaveEvents>
<SuppressByHostName>0</SuppressByHostName>
<Condition></Condition>
<AlertComment></AlertComment>
<FilterCondition>0100000000000000</FilterCondition>
<AlertDescription>Member %Member Account% removed from group %Target Group Domain%\%Target Group Name% by %Operator Account Domain%\%Operator Account Name%.</AlertDescription>
<ScheduleEnabled>0</ScheduleEnabled>
<SuppressBySiteID>0</SuppressBySiteID>
<AlertAssignment></AlertAssignment>
<RuleDistribution>0</RuleDistribution>
<AlertCode>AE_AD_SEC_0008 (3)</AlertCode>
<NotificationFormats>
<ITRTNotificationFormat>
<Guid>{C4EC6A2E-6D15-432C-BF6C-2E26677115B6}</Guid>
<ComposerTemplate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omposerTemplate>
<ComposerId>{C40DBB2E-DF56-43AC-8392-EFB2D0DDCC5A}</ComposerId>
<Enabled>0</Enabled>
<NotificationType>{ECEB8D7E-04D9-49F6-8B38-EB90C97AC523}</NotificationType>
</ITRTNotificationFormat>
<ITRTNotificationFormat>
<Guid>{4A8E7DC7-14FF-4F5C-B024-41635DF0E236}</Guid>
<ComposerTemplate>01000000F834885B1C14B949960CC37CE508B1D02800000049006E005400720075007300740020002500530065007600650072006900740079002500200061006C0065007200740020002D002000250041006C006500720074002E004E0061006D00650025002E00050000007500740066002D003800E600000025004400650073006300720069007000740069006F006E0025000D000A000D000A0041006C0065007200740020007700610073002000670065006E0065007200610074006500640020006F006E00200063006F006D00700075007400650072002000250041006C006500720074002E0048006F00730074004E0061006D00650025002E000D000A0041006C0065007200740020007700610073002000670065006E006500720061007400650064002000610074002000250041006C006500720074002E00540069006D006500470065006E006500720061007400650064004C006F00630061006C00250020002800250041006C006500720074002E00540069006D006500470065006E006500720061007400650064002500200047004D00540029002E000D000A000D000A0046006F00720020006D006F0072006500200069006E0066006F0072006D006100740069006F006E002C00200066006F006C006C006F0077002000740068006900730020006C0069006E006B003A00200025006F007200670070006100720061006D003A005700450042004D004F004E00490054004F005200550052004C002500250061006C006500720074002E0061006C006500720074006900640025002E00</ComposerTemplate>
<ComposerId>{C40DBB2E-DF56-43AC-8392-EFB2D0DDCC5A}</ComposerId>
<Enabled>1</Enabled>
<NotificationType>{E01E93C2-938C-4BBD-88D9-0FD3B0E631E4}</NotificationType>
</ITRTNotificationFormat>
</NotificationFormats>
<DataSources>
<ITRTRuleDataSource>
<Guid>{6BD62A40-22CC-4CC1-92AA-DD0A3AE703B4}</Guid>
<DataSourceId>{A8CFC803-CDAD-47C5-B195-4C043A4F4BC7}</DataSourceId>
</ITRTRuleDataSource>
</DataSources>
<ResponseActions>
<ITRTResponseAction>
<ProviderConfig>01000000260000007B00340035003200460034004500390045002D0034003200390039002D0034003600440038002D0039003700390042002D003700420031003500450042004200460039004300420032007D0004000000260000007B00410041003500360036004400330031002D0034003800450044002D0034004100350044002D0038003600450045002D003000300045004400340042003500370039003500360037007D000A000000250043006F006D00700075007400650072002500260000007B00410042004200320043004500450036002D0039004300350031002D0034003400410034002D0039004400320032002D003100410042003600380037004100340034003900360044007D0010000000250043006F006D007000750074006500720044006F006D00610069006E002500260000007B00360037003700300039004400330046002D0037004200330043002D0034003100430030002D0038004100390034002D004100360035003800420036004500450037003100360042007D002900000025005400610072006700650074002000470072006F0075007000200044006F006D00610069006E0025005C0025005400610072006700650074002000470072006F007500700020004E0061006D0065002500260000007B00340043004300320039003400410044002D0030004400430038002D0034003800460036002D0039003300320041002D004200460031003500340044003400310044004500390032007D001000000025004D0065006D0062006500720020004100630063006F0075006E0074002500</ProviderConfig>
<Guid>{7C7BE3E9-5E7A-4353-A0A8-214B258E03E0}</Guid>
<Timeout>0</Timeout>
<Distribution></Distribution>
<Enabled>0</Enabled>
<ProviderId>{E5D8E6C5-488A-42BF-B636-065E970F0067}</ProviderId>
<ExecutionOrder>2</ExecutionOrder>
<Destination>0</Destination>
</ITRTResponseAction>
<ITRTResponseAction>
<ProviderConfig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roviderConfig>
<Guid>{A729665D-DF60-4A23-AFA9-84D005A0D084}</Guid>
<Timeout>0</Timeout>
<Distribution></Distribution>
<Enabled>0</Enabled>
<ProviderId>{E5D8E6C5-488A-42BF-B636-065E970F0067}</ProviderId>
<ExecutionOrder>0</ExecutionOrder>
<Destination>0</Destination>
</ITRTResponseAction>
<ITRTResponseAction>
<ProviderConfig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roviderConfig>
<Guid>{E0E1F42F-E08A-4807-B439-DCDA31CA7AA0}</Guid>
<Timeout>0</Timeout>
<Distribution></Distribution>
<Enabled>0</Enabled>
<ProviderId>{E5D8E6C5-488A-42BF-B636-065E970F0067}</ProviderId>
<ExecutionOrder>1</ExecutionOrder>
<Destination>0</Destination>
</ITRTResponseAction>
</ResponseActions>
<AlertFields>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{0A426A6A-377D-43D2-BEE2-90CEF744BF32}</Guid>
<FieldValue>%String4%</FieldValue>
<FieldName>Target Group Domain</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{5A8882F9-5AFF-4820-934E-9F20C097CA5C}</Guid>
<FieldValue>%OperatorName%</FieldValue>
<FieldName>Operator Account Name</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{C97CB0E5-082C-4DEF-A2D4-B1DFB9A30376}</Guid>
<FieldValue>%OperatorDomain%</FieldValue>
<FieldName>Operator Account Domain</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{89A84BBF-62C0-4ADE-92FC-DECE025DEA4C}</Guid>
<FieldValue>%String3%</FieldValue>
<FieldName>Target Group Name</FieldName>
</ITRTAlertField>
<ITRTAlertField>
<Suppression>0</Suppression>
<Guid>{DE69837E-CA97-4494-90DD-EF1547931C82}</Guid>
<FieldValue>%MemberAccount%</FieldValue>
<FieldName>Member Account</FieldName>
</ITRTAlertField>
</AlertFields>
</ITRTProcessingRule>
