Audit Delete DNS record

Hello all

Mysteriously a critcal A record was removed or deleted from an AD 2008 dns
zone. I do have some auditing running on the DC's but i'm not sure if what i
have currently being audited would show me who or what deleted the record.
What Auditing should i turn on if i want to montior A records being manually
delted out of a zone? I dont want to audit scaveging just users deleting
records out of AD zones. Also is there an event id that i can start
searching on? The DC's are running windows 2008sp1

Many thanks

"Sawyer" <> wrote in message news:CE61B84C-9410-481E-8962-...
> Hello all
>
> Mysteriously a critcal A record was removed or deleted from an AD 2008 dns
> zone. I do have some auditing running on the DC's but i'm not sure if what i
> have currently being audited would show me who or what deleted the record.
> What Auditing should i turn on if i want to montior A records being manually
> delted out of a zone? I dont want to audit scaveging just users deleting
> records out of AD zones. Also is there an event id that i can start
> searching on? The DC's are running windows 2008sp1
>
> Many thanks
>


Sawyer,

Your question was responded to in the AD group.

Ace