• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 288
  • Last Modified:

Fomer ColleagueOU contents deleted

Hi,

In my ADS there is a OU called former Colleague in that we move in disabled user accounts suddenly i see today that all the users are deleted how can i find who deleted and from which machine this has happened.

THX
Sharath
0
bsharath
Asked:
bsharath
  • 2
1 Solution
 
LauraEHunterMVPCommented:
If you have auditing turned on for the "Directory Service Access" event category, this will appear in the Security logs in the Event Viewer on your domain controllers.

Though it may be shutting the barn door after the horse has bolted where this particular incident is concerned, here is a step-by-step KB for configuring auditing of Active Directory objects: http://support.microsoft.com/kb/814595/

Hope this helps.

Laura E. hunter - Microsoft MVP: Windows Server - Networking
0
 
bsharathAuthor Commented:
Can we enable auditing on a win xp and win 2003 local machines.

How do i do this.

THX
Sharath
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now