As the title states, I need some sort of auditing software for a server’s (MSServer2k3) local administrator, power user, RDP, Local Users…..ect. Anyone have something out there? I’m trying to find out if a user was removed from the administrators group or if the user was never there. I hate using the Windows Auditing Logs mainly because I don’t know when it was removed and I’d be searching for days. Also, if it monitored all files and folders too, that would be even better.
