How to find who disabled AD account?


 hi team,

i have scenario here, ad accounts got disabled , need to find had disabled account.? please suggest how find user disabled account.

thanks, dev

hi,

basically need event 629 2003 , 4725 vista, 2008 , above in security log. can use ldp.exe , security logs, ldp part of support tool , can use tool perform lightweight directory access protocol (ldap) searches against active directory specific information given search criteria.

check below articles, account deletion, wrote booradely : hey deleted user ad???

you can follow steps in below article uses cli, wrote abizer_hazrat

tracing down user , computer account deletion in active directory
http://blogs.technet.com/b/abizerh/archive/2010/05/27/tracing-down-user-and-computer-account-deletion-in-active-directory.aspx


best regards,

abhijit waikar.
mcsa 2003 | mcsa:messaging | mcts | mcitp:server administrator | microsoft community contributor | my blog

disclaimer: posting provided "as is" no warranties or guarantees , , confers no rights.







Windows Server  >  Directory Services



Comments

Popular posts from this blog

server manager error: ADAM.events.xml could not be enumerated.

Cannot access Anywhere Access using domain name?

WMI Failure: Unable to update Local Resource Group