Re: View Changes Made to Active Directory




"albertsoncookmcse" <albertsoncookmcse@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:39AA5010-5D46-4DC5-9119-2B200A7302A1@xxxxxxxxxxxxxxxx
Only failure audits were turned on for AD (before my time). Someone made
two
serious changes to our main security groups. Is there an easy microsoft
solution to go back and look at changes made to any security groups?

Not without Account Management auditing (successes) having
been turned on previously.

Too late now without that.

We have
to find out what idiot made the change and didn't know what they were
doing.

Do you by chance have TOO many idiots (er, admins)? <grin>

We don't have any tracking software currently installed and auditing was
set
for failure only. Anyone with suggestions the info would be greatly
appreciated.

There aren't any methods except giving everyone the third degree
and hoping for a confession....


--
Herb Martin, MCSE MVP
www.LearnQuick.Com


.