Re: Users missing Exchange mailbox still there

Pretty much, if it's not in the event logs it's really tough to spot how or
who. Have you considered questioning everyone who has enough access to have
caused that? Were you auditing enough information to have found the deletes
in the security logs?
Could it have been an application that did it? I have seen applications have
adverse affects on user accounts, but I've never seen user accounts go
unaccountably missing. There's always a reason.

Al


"sheltonm1977" <sheltonm1977@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C9672653-0420-4C34-B13B-57ED971B9716@xxxxxxxxxxxxxxxx
> We started getting calls from users sunday saying they could not log in or
> other users saying they could not find a person in the Global Address
> Book.
> We started looking into it and right around 100 users inside our active
> directory were gone. There seems to be no pattern, no order. I have been
> through the event logs, syslogs, firewall syslogs, as well as our tipping
> point logs. Nothing seems to have gotten through enough to cause the
> damage
> that was done. We have already recreated the users, reattached them to
> thier
> mailbox, and recreated profiles on the PC's. I am out of resources to
> figure
> out why this happened, just for the fact we would really rather not have
> it
> happen again. Has anyone seen this before or does anyone know the correct
> direction i should be looking in.
>
> Thanks
> --
> Shelton


.

Relevant Pages

  • Re: Problem in Exchange, not many info in logs, please help!
    ... Clear the event logs on the server and connect with a client that has the ... Default Offline Address List ...
    (microsoft.public.windows.server.sbs)
  • Re: How to sort a comma delimited text file?
    ... > Trying to make a script that takes 4 different event log files, ... If you mean the Windows Event logs, these are not comma delimited files. ... Dim strComputer, objWMIService, colLoggedEvents, objEvent ...
    (microsoft.public.scripting.vbscript)
  • restart solved all
    ... > advised and I am positive that DNS is fine. ... > with Group Policy or User Profiles. ... > - logs Kerberos events that show I am successfully issued TGT and Service ... >> And don't forget to check the event logs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS2000 X225 Server
    ... Have you checked the Workstation event logs? ... Independent Experts (MVPs do not work for MS) ... And the server starts ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Users missing Exchange mailbox still there
    ... > in the security logs? ... >> other users saying they could not find a person in the Global Address ... >> through the event logs, syslogs, firewall syslogs, as well as our tipping ... and recreated profiles on the PC's. ...
    (microsoft.public.windows.server.active_directory)