User accounts being removed from Active Directory automatically.

Posted on 2009-12-20
Last Modified: 2013-12-05
Did this happen with anyone else:

After installing some security updates from Microsoft on one of our Domain Controllers, user accounts are getting deleted randomly from Active Directory. Some computer accounts are also getting removed but less numbers  than the user accounts. I re-created those accounts but some of them disappeared again. Checked Event Viewer but nothing suspicious there. Only thing I notices that the problem started after installing security updates from Microsoft.

It started on Tuesday 15/12/2009.

Our environment:

PDC: Windows 2003 R2 SP2
BDC: Windows 2000 Server SP4
Exchange 2007 on a seperate server

Thanks in advance.
Question by:imranrft

    Expert Comment

    Is security update is compatible for user a/c data?,  If yes go back using backup and try manual update. Find the stage of error and inform to software vendor for correction. Thanks.

    Author Comment

    How to check whether security update is compatible or not for user account data?

    Is there any way to check Active Directory object additions/deletions logs (it is not in Event Viewer)? OR is it possible to enable logging for Active Directory additions/deletions/modifications?

    LVL 65

    Accepted Solution

    I have never seen Active Directory delete objects randomly. Certainly not caused by an update from Microsoft. If the update was doing that then it would be well know. I suspect it was a coincidence and something is doing it.
    You may well have to take it to Microsoft for resolution though.


    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    Suggested Solutions

    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now