Re: Rebuilding DC in domain (New Hardware Installed)



CAN ANYBODY HELP ME?!?!?!?!

I am using Event Log Explorer to create filters to view certain logs in

saved event log files. Everything works perfectly and I get exactly
the information that I am looking for out of each log; HOWEVER, I have
come to notice that if any changes are made to user or computer
accounts using the Active Directory Remote Management tool, it is not
logged the same as when I make the changes in Active Directory while
logged into the server. (As a matter of fact, I am unable to find any
logs for the changes whatsoever).
Just so you know where I am coming from, here is an example:
Lets say that a new account is created with the name of "TestAccount"
by user "AccountCreator" at 12:30am on 12/25/1955. I can go into Event

Log Explorer, load the event log from the specified date, and apply a
filter to show me all important changes for the day (a filter that I
have setup that filters by Event ID), and get this output:
Event ID 624
User Account Created:
New Account Name: TestAccount
New Domain: TestDomain
New Account ID: TestDomain\TestAccount
Caller User Name: Account Creator
Caller Domain: TestDomain
When I create a new account using Active Directory Remote Management
tool, I don't get an Event ID 624, and all other events that show up at

the time of setup are either unreadable, or do not have anything to do
with a new user account.
My question is, is there another Event ID that replaces Event ID 624
(if so I will need one to replace many others as well that I can
elaborate on in the future), or, is there a way to DISABLE Active
Directory Remote Management on the servers so I know that all new users

or computers in the domain will show up in Event Viewer? (reports are
used to verify that we have paperwork for all new users created, and if

one shows up in Event Viewer that we don't have paperwork for, it is a
problem. This becomes useless if one can bypass Event Viewer by using
Active Directory Remote Management)
Sorry for the long message.
RBOT

.



Relevant Pages

  • Re: Cross-Domain question (Parent - Child)
    ... Author of O'Reilly Active Directory Third Edition ... have setup that filters by Event ID), ... User Account Created: ... When I create a new account using Active Directory Remote Management ...
    (microsoft.public.win2000.active_directory)
  • Re: Active Directory Domain Policy
    ... about Active Directory Remote Management. ... accounts using the Active Directory Remote Management tool, ... have setup that filters by Event ID), ... User Account Created: ...
    (microsoft.public.win2000.active_directory)
  • Re: Cross-Domain question (Parent - Child)
    ... have setup that filters by Event ID), ... User Account Created: ... When I create a new account using Active Directory Remote Management ...
    (microsoft.public.win2000.active_directory)
  • In With the New E-Mail, Out With the Old
    ... personal account I use through Yahoo. ... I have more than 6,200 e-mails in my Yahoo inbox alone. ... FILTERS AND FOLDERS. ... Sure, now I have more folders to sort through during the day, but the ...
    (comp.dcom.telecom)
  • Re: Outlook Express/Hotmail mail setup questions and general use quest
    ... email account working pretty much like I have it with my corporate work email ... I guess I was using OE to access Hotmail through HTTP from before they ... support MAPI, nor IMAP, which seems like it'd be the closest ... all these sites) and if I could just get enough filters to catch all those ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)

Loading