Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How can i tell when a domain account was disabled?

Posted on 2011-09-15
2
Medium Priority
?
417 Views
Last Modified: 2012-05-12
Is it possible to find out the date when a user account in AD was disabled. It's important if we can prove what date it was disabled.

Thanks in advance

Edit: Domain functional level is Windows Server 2008
0
Comment
Question by:itmtsn
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
netjgrnaut earned 2000 total points
ID: 36542345
You can see the last modification date as an AD object attribute, but that doesn't indicate what the particular modification was (in this case, you're looking for "account disabled").

Unless you already have object access auditing turned on in AD, I'm afraid there's no way to "prove" what you're asking.

Sorry...
0
 

Author Closing Comment

by:itmtsn
ID: 36542524
Thanks. I used ADSI Edit and found some useful info. Like you say without auditing turned on it's difficult to prove anything.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question