New Domain Admin Detected

Overview

This script detects the user or group of users if its promoted to domain administrator on a Windows domain controller. It excludes the default administrators and any user mentioned in the cpvalExcludedDomainAdmins.

Sample Run

Play Button > Run Automation > Script

Dependencies

• Custom Field : cPval Excluded Domain Admin
• Custom Field : cPVAL New Domain Admin Monitoring
• Solution : New Domain Admin Detected

Automation Setup/Import

Automation Configuration

Output

• Activity Details