Re: who deleted a user acct in AD

You can check the EventLog on the DC. Look into the Security log:

Source: Security
Category: Account Management
Eventid: 630

Hope this will help you!!

.

Relevant Pages

  • Passwords not changing in AD mode
    ... Security log on the domain controller when this happens: ... The "wssaccount" has access delegated to the OU for account management. ... a user can change their own password if they are an admin in the ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Hyperlinks dont function after TS lockdown
    ... Sounds like you are looking in the Security Log. ... EventID 865 ... wrote on 25 maj 2007 in ... Using Software Restriction Policies to Protect Against ...
    (microsoft.public.windows.terminal_services)
  • strange security event logs
    ... servers' security log since last year (way before I ... Failure Audit ... EventID 560 ...
    (microsoft.public.win2000.security)
  • Re: the right to write eventlog
    ... You can't write to the security log. ... > I have an asp.net application which need to write eventlog to ... > not have enough permission to do that, ... > put it into a admin group, can anyone tell how, thanks ...
    (microsoft.public.security)