Hello Folks,
Actually today I received an e-mail from SCOM Alerts that one user got the Domain Admin. Then I checked which user got the Domain Admin Rights that user was not there in Active Directory. but actually due to office purpose I was generation the ad users report before 1 minutes I got SCOM Alert. I again checked that report that user which got the Domain Rights that user was there in report. I also checked the Event Viewer there also I got the event that one of the authorized Domain Admin has given the access to that ID but the person who's ID is that was not in office. could someone tell me if it was Hacked by Someone or something else.
Regards
Rishi Aggarwal
Regards Rishi Aggarwal