New Domain Admin Detected
Overview
This script detects the user or group of users if its promoted to domain administrator on a Windows domain controller. It excludes the default administrators and any user mentioned in the cpvalExcludedDomainAdmins.
Sample Run
Play Button > Run Automation > Script
Dependencies
- Custom Field : cPval Excluded Domain Admin
- Custom Field : cPVAL New Domain Admin Monitoring
- Solution : New Domain Admin Detected
Automation Setup/Import
Output
- Activity Details
Changelog
2025-10-17
- Initial version of the document