I would like to create an alert to detect when a new user is added to " domain Admins" group and/or "enterprise admins" global group and disable that account automatically.