Re: Active Directory Domain Policy

This is completely not relevant, but I need to find somebody who knows
about Active Directory Remote Management. I will post my question
here, and maybe somebody will see it and at least tell me where to go
to find my answer

Explorer to create filters to view certain logs in
saved event log files. Everything works perfectly and I get exactly
the information that I am looking for out of each log; HOWEVER, I have
come to notice that if any changes are made to user or computer
accounts using the Active Directory Remote Management tool, it is not
logged the same as when I make the changes in Active Directory while
logged into the server. (As a matter of fact, I am unable to find any
logs for the changes whatsoever).
Just so you know where I am coming from, here is an example:
Lets say that a new account is created with the name of "TestAccount"
by user "AccountCreator" at 12:30am on 12/25/1955. I can go into Event

Log Explorer, load the event log from the specified date, and apply a
filter to show me all important changes for the day (a filter that I
have setup that filters by Event ID), and get this output:
Event ID 624
User Account Created:
New Account Name: TestAccount
New Domain: TestDomain
New Account ID: TestDomain\TestAccount
Caller User Name: Account Creator
Caller Domain: TestDomain
When I create a new account using Active Directory Remote Management
tool, I don't get an Event ID 624, and all other events that show up at

the time of setup are either unreadable, or do not have anything to do
with a new user account.
My question is, is there another Event ID that replaces Event ID 624
(if so I will need one to replace many others as well that I can
elaborate on in the future), or, is there a way to DISABLE Active
Directory Remote Management on the servers so I know that all new users

or computers in the domain will show up in Event Viewer. (reports are
used to verify that we have paperwork for all new users created, and if

one shows up in Event Viewer that we don't have paperwork for, it is a
problem. This becomes useless if one can bypass Event Viewer by using
Active Directory Remote Management)
Sorry for the long message.
RBOT

.

Relevant Pages

  • Re: Cross-Domain question (Parent - Child)
    ... Author of O'Reilly Active Directory Third Edition ... have setup that filters by Event ID), ... User Account Created: ... When I create a new account using Active Directory Remote Management ...
    (microsoft.public.win2000.active_directory)
  • Re: Rebuilding DC in domain (New Hardware Installed)
    ... have setup that filters by Event ID), ... User Account Created: ... When I create a new account using Active Directory Remote Management ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cross-Domain question (Parent - Child)
    ... have setup that filters by Event ID), ... User Account Created: ... When I create a new account using Active Directory Remote Management ...
    (microsoft.public.win2000.active_directory)
Loading