Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Prevent mass file operations?

$
0
0

colby, thanks for the clarification. I'm testing out this ability now but I seem to be having some trouble. I created a test group in Active Directory and created a NewGroupMember rule to:

 

  1. E-mail me if any accounts gets added to the test group
  2. Remove said account from the group

 

I'm receiving the notification but said account isn't being removed. For the Remove Domain User From Group action, I'm using the following parameters

 

  • Domain Controller Agent = NewGroupMember.DestinationMachine
  • Group Name = NewGroupMember.GroupName
  • User Name = NewGroupMember.DestinationAccount

 

Those parameters are also sent to me through the e-mail notification so I can verify that they're correct. Do you have an idea where I'm going wrong?


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>