Cq
Claritiq
·
G - Privileged Groups
Critical
Caution
Healthy · target
Scope: eni.enigron.com · c1.eni.enigron.com
Privileged Groups
7
per forest standard
Total Memberships
68
sum across groups
Unique Users
47
12 are in >1 group
Nested Groups
3
group-in-group
Disabled Members
5
in group but disabled
Modified Last 7 Days
3
whenChanged within window
Membership roster per group
| Group | Domain | Enabled | Disabled | Total |
|---|---|---|---|---|
| Domain Admins | CONTOSO.COM | 8 | 2 | 10 |
| Enterprise Admins | CONTOSO.COM | 3 | 1 | 4 |
| Schema Admins | CONTOSO.COM | 2 | 0 | 2 |
| Account Operators | CONTOSO.COM | 12 | 1 | 13 |
| Server Operators | CONTOSO.COM | 8 | 1 | 9 |
| Backup Operators | CONTOSO.COM | 9 | 0 | 9 |
| Print Operators | CONTOSO.COM | 5 | 0 | 5 |
Recently modified privileged accounts (whenChanged ≤ 7 days)
| Account | Privileged group | whenChanged |
|---|---|---|
| admin-tchen-new | Domain Admins | 2026-04-26 14:08 |
| svc-backup-sql | Backup Operators | 2026-04-25 09:42 |
| hdesk-rlopez | Account Operators | 2026-04-22 11:15 |
Point-in-time view of privileged accounts whose
whenChanged attribute landed in the last 7 days. For full historical change tracking (additions / removals over a quarter), see Phase 3 — Sentinel integration via Defender for Identity (BACKLOG F.11).