Hi, I want to know if there is a way to monitor/audit changes of group membership of Universal Distribution Groups(mail-enabled). I have no idea if there is something in MOM or Security events on a Global Catalog(or other DC). Any hint? Thanks

you could set it up as a 'restricted group'in aGPO. http://www.windowsecurity.com/articles/Using-Restricted-Groups.html