How can I find if a local account/user has been created and then added to the admin/domain admin group within a span of certain time such as 1 hour?
Local user account codes
EventCode=4720 OR EventCode=4721
Admin account codes
EventCode=4732 OR EventCode=4728 OR EventCode=4756
I am not able to structure it right?
Can anybody help