Hi,
This blog post will show you how to configure auditing on your cluster:
http://blogs.technet.com/askcore/arc...r-cluster.aspx
I'm not sure if you can deterministically tell who moved the group, but you
should at least be able to tell who accessed the cluster at that time (and
likely initiated that move).
We have a new feature coming out in 2008 R2 called "Read-Only APIs" which
will allow you to assigned Read Only permissions to cluster access, so people
can view the status of the nodes, groups, resources, etc., but cannot perform
any actions. Perhaps this would also help you.
Thanks,
Symon Perriman
Program Manager
Clustering & HA
"JamesRussel" wrote:
> can anyone tell if there is a cluster audit that will tell you who moved a
> group to the other node.
>
> --
> JamesRussel
> Cebu