[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 327
  • Last Modified:

Who made a display name change in AD

One of my companies SVP found that they had their display name changed.
Is there a way I can find out who changed it?
The admin that corrected it did not view the object tab to see when it was previously changed but I would suspect it not be any greater than a day or two.
Where and how do I go about getting as much info on it as possible?
Thanks in advance
1 Solution
Sekar ChinnakannuStaff EngineerCommented:
Chris DentPowerShell DeveloperCommented:

The only place you'll see that kind of information is the Security Log on your Domain Controllers. And you'll only see that if you already anticipated this moment and set up audit logging.

If you haven't set that up, or the Security logs rotate too quickly you're out of luck.

Shabarinath RamadasanInfrastructure Specialist - MicrosoftCommented:
Ideally speaking, its difficult to track who made what change on which date from which system directly.
If you have thirdparty audit tools like Quest ChangeAuditor, its difficult to get this.

Good luck
fpstararaAuthor Commented:
never found the offending admin or process
Glen KnightCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now