Finding who deleted an account and when

Posted on 2004-10-27
Last Modified: 2010-04-19
One of our key service accounts was deleted from our windows 2003 domain on the last 3 days.  I have domain techies on staff as well as a contractor who uses remote acess to get into the domain.  Is there a way I can pin down when the account was deleted and by whom?  What's the best way to keep track of this stuff so I can see who does what to our domain accounts.

Question by:Scozza
    LVL 95

    Expert Comment

    by:Lee W, MVP
    If you have Auditing enabled, you can look in your security event log for this info (assuming you have indicated account changes to be audited).  If not, you pretty much will never know in this case.  HOWEVER, if you enable it from this point forward, you'll know in the future.
    LVL 95

    Accepted Solution


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Course: Foundations of Front-End Development

    Jump-start a lucrative career in front-end web development, with zero previous coding experience required. This course covers the basic programming concepts and languages required for creating engaging websites from scratch.

    I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…

    913 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now