Send Knowledge Base Article
The article has been sent to your inbox successfully.
We never share your data
Changes to the directory objects for Foreign Security Principals are being reported as made by system
KB1792 | Last review: Dec 09, 2013 | Netwrix Auditor for Active Directory | 5.0 and above
|The ForeignSecurityPrincipals container in Active Directory represent security principals from trusted domains external to the forest, and allows foreign security principals to become members of groups within the domain. The ForeignSecurityPrincipals objects are being created automatically by system (Active Directory), so having changes of the foreignSecurityPrincipal object reported as made by system is a normal behavior of the Netwrix Auditor.
For more information regarding the ForeignSecurityPrincipals container and the ForeignSecurityPrincipals objects please refer to the following Microsoft KB articles:
Was this information helpful?