I am trying to find a timestamp for when a Machine Object was added to an active directory group.
I know the object doesn't change it's "last modified" date when added to a group because it is the group that is being modified. I have a query in SCCM that checks the group every 24 hours. My helpdesk is saying it is not working, and I want to ensure the additions are happening when they say they are.
Best Answer
You can use repadmin to determine when values were added to the member attribute. (This may not work for very old groups that were created in Windows 2000 before Linked Value Replication).
In the example below, the member was added on 2014-03-27 10:02:48.