Have more details in the logs regarding computer accounts moved/copied/deleted events
When we look at system logs in SEPM 11.0 (Monitors > Logs > Log type: System, Log content: Administrative), we can see traces of computers moved, copied or deleted:
|Time Stamp||Admin Name||Event Type||Domain Name||Server Name||Site Name|
|01/03/2012 17:30||MyAdminName||Computer is deleted||MyDomainName||MyServerName||MySiteName|
|01/03/2012 17:28||MyAdminName||Computer is moved||MyDomainName||MyServerName||MySiteName|
|01/03/2012 17:27||MyAdminName||Computer is copied||MyDomainName||MyServerName||MySiteName|
However, we do not have detailled information regarding group membership.
For instance, in the case of computer moved, it would be very interesting to see from which group to which group.
In the case of copy, it would be interesting to know to which group.
In the case of deletion, it would be interesting to know from which group.
This would allow us to have more relevant information about administrative operations and to identify unexpected/incorrect move/copy/delete actions.
NOTE: this idea can apply to SEPM 12.1 as well (Event Type strings are slightly different - i.e The computer account has been moved to a different group - but still there is no field for group membership).