|Subject:||Re: Tracking "lost" Object In Active Directory|
|Posted by:||Meinolf Weber (meiw…@gmx.de)|
|Date:||Mon, 17 Nov 2008|
For tracking you have to enable auditing in the Default domain controllers
policy or better create your own policy and link it to the Domain controllers
For restoring see here, is not only for user accounts, if you follow the
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
> Somehow a computer (server) account was removed from active directory
> meant that the server could no longer log in, although when we
> the server everything was OK I would like to learn from this so....
> I can see the computer in the deleted containter when I examine the
> domain controller :
> 1. Can I find out if the server was manually deleted and if so by who
> where etc..
> 2. Can I see if the server was deleted due it being tombstoned (?)
> Just looking to learn and understand what information is available.
Tracking "lost" Object In Active Directory posted by newbie007 on Mon, 17 Nov 2008