I'm DBA in my organization and use SQL Server 2012 and 2014. I requestd to define multiple group in active directory such as Developer, DBA, supporter and ets... and add my users to this groups. after this a create login from this groups and grant access to DBA, Developer and supporter groups. Change in my organization chart is above, and each time one personnel changed his position, I request to change his group in Active Directory.
My problem: The Admin of Active Directory can add his user or any user to each of this groups and get access to my database without that I get it.
I want to use this groups for grant permission and looked up for a way for solve my problem.
Thanks in advance.