crl-00103 will not fire - no alerts/views.
I'm guessing that that particular CRL doesn't cover the specific windows event ID you are looking for/at.
Go to Overview / System Configuuration / Messages / Manage Messages and then show all entries for Taxonomy/Event Category = "User.Management.Groups.Modifications.User Added" AND all of the Windows devices types like attached.
These are the messages that are included in that CRL. Otherwise, you need to make a copy of that CRL, which also includes your expected message ID.