Solved

how can I found out on which DC my user has been created

Posted on 2007-11-15
6
198 Views
Last Modified: 2013-12-05
Hello guys,

I have a simple question, can anyone tell me how can i found out on which domain controller my user has been initially created?

thanks
0
Comment
Question by:rares_dumitrescu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
6 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 20295818
There is no source record....the user is created, then replicated to every DC....its all multimaster infrastructure....holding a root record sounds something along the lines of PDC days which are long gone....i have never found a way to find this
0
 

Author Comment

by:rares_dumitrescu
ID: 20296010
nither did I, but I`m sure it must be something....let`s imagine the following scenario:
"You have a virus that creats user accounts in your organization, on one domain controller....how can you find out which one to unplug it from the network....think that you might have 300 DCs in this organization....you can not go and browse the security logs on each one...."

well - i think I can turn on auditing for ad objects and creat a vbscript to read the security log for each DC ...but it`s a bit difficult and not handy....so i`m thinking that there should be an easier way....

0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 250 total points
ID: 20296109
auditing is pretty much the only thing that comes to mind - i did a quick hunt but havent found anything....If you dont get any more hits on this, post again and ill contact some DS gurus
0
 
LVL 51

Assisted Solution

by:Netman66
Netman66 earned 250 total points
ID: 20298128
The Security logs should be able to tell you where an object was created.

You may need to turn on auditing for object creation to get more details, but the act of adding a user should be logged now.

0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My previous article  (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html)detailed one possible method to get SCCM 2007 installed an…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question