Re: How do I see who created a user/group/OU in W2k3 AD???


"islanman" <islanman@xxxxxxxxx> wrote in message
news:1173914052.264288.53930@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Enable Account Management Auditing (unless you need low level
objects then it is DS Object Auditing you need.)

You can likely get the creation time (maybe with ADSIEdit) but the
when and where need auditing.

--
Herb Martin, MCSE, MVPhttp://www.LearnQuick.Com
(phone on web site)

Ok... let's say I have auditing enabled.

How can I view past stats on who created users/groups/OUs? Is there a
script I can run, a GUI tool I can use? I'm at my wits end.

Event viewer or scripts that view the event logs or archives.

I can get the stats for the current items, but how do I get the info
for the things created in the past???

You cannot (typically) get what you asked to see without having
auditing turned on (previously.)


.

Relevant Pages

  • Re: How do I see who created a user/group/OU in W2k3 AD???
    ... objects then it is DS Object Auditing you need.) ... when and where need auditing. ... Herb Martin, MCSE, MVPhttp://www.LearnQuick.Com ... Event viewer or scripts that view the event logs or archives. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How do I see who created a user/group/OU in W2k3 AD???
    ... objects then it is DS Object Auditing you need.) ... You can likely get the creation time (maybe with ADSIEdit) but the ... when and where need auditing. ... How can I view past stats on who created users/groups/OUs? ...
    (microsoft.public.windows.server.active_directory)
  • Re: File Audit
    ... have deleted the file .I hope to kbow which user have modified and ... delete of the special fle ... You have to also enable File (i.e., OBJECT Auditing) in the Local ... Auditing of files and other objects requires TWO types of settings: ...
    (microsoft.public.windows.server.general)
  • Excessive 560 events logged when turning on Object Access Audit
    ... I have to use object auditing. ... I get a TON of event 560 failures. ... Sometimes to the tune of 30 or ...
    (microsoft.public.win2000.security)
  • Re: File Auditing with Group Policy
    ... object access auditing as you have described and a script to turn auditing ... start generating shirtloads of audit events you might blow out your logs so ... The GPO doesn't come into this though. ...
    (microsoft.public.windows.group_policy)