Computer accounts moved

computer accounts moved to Temp/Staging OU and the account got disabled, we don't who moved it and when it is moved, how it find out more details about this issue.
Who is Participating?
RizzleConnect With a Mentor Commented:
Have you got any scripts running on your environment to disablr inactive computer accounts? The only other way to find out who moved the machine and disabled it would be to use some sort of audit tool. We use AD manager and AD audit.
Justin YeungSenior Systems EngineerCommented:
if you don't have auditing enabled out object in AD, you will not able to see who moved it.

however, you can see when was the last changes of the AD object by looking at the attribute of whenchanged.
GoodADAuthor Commented:
please accept "Justin Yeung" comments as well as accepted solution. thanks
All Courses

From novice to tech pro — start learning today.