Track down who deleted an OU

I have a large ad forest and discovered that someone deleted an OU containing many user objects. I have recovered the objects with an authoritative restore...

Can anybody tell me how to hunt down who deleted this OU. Is this possible or would I have to have had some kind of object auditing on???
LVL 1
andrew_89Asked:
Who is Participating?
 
sirbountyCommented:
You would have needed auditing on...and potentially on every DC... : (
0
 
andrew_89Author Commented:
Hmm that could be painful, looks like I need to take a look at delegation for specific tasks and keep only a few able to do this.

thanks
0
 
sirbountyCommented:
Absolutely!

Glad I could help...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.