Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Log or event ID of a newly created or modified AD object.

Posted on 2011-10-11
Medium Priority
Last Modified: 2012-08-13
Dear Members,
                     I've recently asked my my manager that he wants to know who is the administrator modified an AD object say like he wants to know the administrator responsible for modifying the display name of a user. Is there any way to identify the administrator using event ID or Logs ?

Anticipating your valuable suggestions.
@ Ahmed Ali
Question by:AhmedAliShaik
  • 2
  • 2
LVL 26

Assisted Solution

e_aravind earned 1500 total points
ID: 36953588
did you got a chance to review the below URL

AD DS Auditing Step-by-Step Guide

Author Comment

ID: 36953795
HI Aravind,

I went through the link and found logs in Auduting like Created,Moved,updated, etc....

Can we know if only display name of an AD object is update.
LVL 26

Accepted Solution

e_aravind earned 1500 total points
ID: 36954382
HOW TO: Audit Active Directory Objects in Windows Server 2003

-- Configure an Audit Policy Setting for a Domain Controller
-- Configure Auditing for Specific Active Directory Objects

the above settings should help you to get the event-IDs
Event ID: 4738
Source: Microsoft Windows Security
Task: User Account Management

Author Closing Comment

ID: 36973067
Thank you

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2016 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
Exchange database can often fail to mount thereby halting the work of all users connected to it. Finding out why database isn’t mounting is crucial and getting the server back online. Stellar Phoenix Mailbox Exchange Recovery is a champion product t…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question