Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

How can i tell when a domain account was disabled?

Posted on 2011-09-15
2
Medium Priority
?
423 Views
Last Modified: 2012-05-12
Is it possible to find out the date when a user account in AD was disabled. It's important if we can prove what date it was disabled.

Thanks in advance

Edit: Domain functional level is Windows Server 2008
0
Comment
Question by:itmtsn
2 Comments
 
LVL 6

Accepted Solution

by:
netjgrnaut earned 2000 total points
ID: 36542345
You can see the last modification date as an AD object attribute, but that doesn't indicate what the particular modification was (in this case, you're looking for "account disabled").

Unless you already have object access auditing turned on in AD, I'm afraid there's no way to "prove" what you're asking.

Sorry...
0
 

Author Closing Comment

by:itmtsn
ID: 36542524
Thanks. I used ADSI Edit and found some useful info. Like you say without auditing turned on it's difficult to prove anything.
0

Featured Post

How to Use the Help Bell

Need to boost the visibility of your question for solutions? Use the Experts Exchange Help Bell to confirm priority levels and contact subject-matter experts for question attention.  Check out this how-to article for more information.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here's a look at newsworthy articles and community happenings during the last month.
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question