Is it possible to detect granular access to a particular AD group, rather than simply domain access? That is, if I am a member of 2 AD groups - GR_Read_HR, and GR_Write_Finance, is it possible to capture the date I used each of these groups?

  • I do not believe so. Permissions are not logged (and not required to be logged). They way they work in Windows, I'm not even sure it could be possible. – schroeder Nov 30 '17 at 8:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.