Hi all,
Our workplace currently has a regular LAN account and also a separate admin account. What I am hoping to do with LEM is report on when anyone is using their admin account to modify their LAN account.
Scenario as follow:
John citizen logs into his admin account (admin-jcitizen) and modifies his regular account in AD (jcitizen).
I know you could use something like the following (UserModifyAttribute.SourceAccount = UserModifyAttribute.DestinationAccount) to alert on modifying the SAME account, but looking to alert on the scenario above instead.
Does anyone know if this can be done in LEM and possibly offer some insight?
Thanks in advance!