Are there any tools or technqiues that can audit or send a reminder when a new local administrator account has been setup on a server or workstation, or where a domain account has been added to the local admins group, or when a user has been added to a powerful group like domain admins? So a security boss can keep an eye on whats happening in real time?

Hi, You can audit them by the following policy: Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy: Audit account management For more information, please refer to: Audit account management http://technet.microsoft.com/en-us/library/cc737542(v=ws.10).aspx Regards, Bruce