[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

how can I found out on which DC my user has been created

Posted on 2007-11-15
6
Medium Priority
?
202 Views
Last Modified: 2013-12-05
Hello guys,

I have a simple question, can anyone tell me how can i found out on which domain controller my user has been initially created?

thanks
0
Comment
Question by:rares_dumitrescu
  • 2
4 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20295818
There is no source record....the user is created, then replicated to every DC....its all multimaster infrastructure....holding a root record sounds something along the lines of PDC days which are long gone....i have never found a way to find this
0
 

Author Comment

by:rares_dumitrescu
ID: 20296010
nither did I, but I`m sure it must be something....let`s imagine the following scenario:
"You have a virus that creats user accounts in your organization, on one domain controller....how can you find out which one to unplug it from the network....think that you might have 300 DCs in this organization....you can not go and browse the security logs on each one...."

well - i think I can turn on auditing for ad objects and creat a vbscript to read the security log for each DC ...but it`s a bit difficult and not handy....so i`m thinking that there should be an easier way....

0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 1000 total points
ID: 20296109
auditing is pretty much the only thing that comes to mind - i did a quick hunt but havent found anything....If you dont get any more hits on this, post again and ill contact some DS gurus
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 1000 total points
ID: 20298128
The Security logs should be able to tell you where an object was created.

You may need to turn on auditing for object creation to get more details, but the act of adding a user should be logged now.

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question