Hello,
i would like to implement following audits that i can`t get to work:
Task 1: Send alert when a user who is a member of a specific OU logs in via interactive login (logontype = 2)
Problem: There is no way to filter for only logon events with logontype = 2 that i could find. Also the filter for "OU GUID" does not seem to work. I only get a logon alert when i use the "user name" filter and ask for a specific user.
Task 2: I want a weekly report about who is a member of a certain group
Problem: I can only report what has changed, not the status quo.
Please let me know if what i want to do is possible and if so, how.