Re: delete user from AD and not exchange

From: Leif Pedersen [MVP] (leif.pedersenNOSPAM_at_get2net.dk)
Date: 02/12/05


Date: Sat, 12 Feb 2005 13:08:50 +0100

Hi,

1.) If you have audit account management turned on you will be able to find
who and when by looking in the security log on your domain controller.

2.) Create a new user (don't mailenable this new user) and from exchange
system manager reconnect this new user to the old mailbox. Make the new user
member of the same security and distribution groups.

Leif

"mo_d" <mod@discussions.microsoft.com> skrev i en meddelelse
news:F541FA5E-01CE-442B-89B7-3425AA64EF63@microsoft.com...
> I am running a 2000 domain with a 2003 exchange server.
> I just had a user deleted from our system. Their mail account still exist.
> 1. I would like to know what the best way to track and find out when and
by
> who the user was deleted.
> 2. I need to know how to restore this user and reconnect them back to
their
> mailbox and desktop profile.
>
> Thanks, Mike



Relevant Pages

  • RE: How do I find out who disabled an account in AD?
    ... We have "Audit account management" set to "success,failure. ... "audit directory service object" in our AD group policy. ... My question is what do I search for in the security log? ...
    (microsoft.public.security)
  • Re: add machine to domain event ID?
    ... You should turn auditing on "Audit account management" (if I remember ... Then you should be able to see events in security log. ...
    (microsoft.public.win2000.security)
  • RE: Event for Password Changes
    ... open domain controller security policy and make audit account management ... Then when user changed password, in the security log, There are several ... Windows 2003 server and SBS 2003 can also support audit ...
    (microsoft.public.windows.server.sbs)
  • Anonymous change of passwords?
    ... BTW - Windows 2003 seems to completely ignore the bit i ... but Windows 2003 doesn't modify this ... In the security log I found the ... >Audit Account Management 627 NT ...
    (microsoft.public.security)
  • Re: Strange question...Denying admin permissions to a mailbox? Read on.
    ... What about the tape backups that contain his mailbox? ... You could look in the Security Log in Event Viewer. ... Mark Fugatt ...
    (microsoft.public.exchange2000.admin)