Solved

How can i tell when a domain account was disabled?

Posted on 2011-09-15
2
412 Views
Last Modified: 2012-05-12
Is it possible to find out the date when a user account in AD was disabled. It's important if we can prove what date it was disabled.

Thanks in advance

Edit: Domain functional level is Windows Server 2008
0
Comment
Question by:itmtsn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
netjgrnaut earned 500 total points
ID: 36542345
You can see the last modification date as an AD object attribute, but that doesn't indicate what the particular modification was (in this case, you're looking for "account disabled").

Unless you already have object access auditing turned on in AD, I'm afraid there's no way to "prove" what you're asking.

Sorry...
0
 

Author Closing Comment

by:itmtsn
ID: 36542524
Thanks. I used ADSI Edit and found some useful info. Like you say without auditing turned on it's difficult to prove anything.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Suggested Courses

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question