• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 424
  • Last Modified:

How can i tell when a domain account was disabled?

Is it possible to find out the date when a user account in AD was disabled. It's important if we can prove what date it was disabled.

Thanks in advance

Edit: Domain functional level is Windows Server 2008
1 Solution
You can see the last modification date as an AD object attribute, but that doesn't indicate what the particular modification was (in this case, you're looking for "account disabled").

Unless you already have object access auditing turned on in AD, I'm afraid there's no way to "prove" what you're asking.

itmtsnAuthor Commented:
Thanks. I used ADSI Edit and found some useful info. Like you say without auditing turned on it's difficult to prove anything.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now