Auditing user deletion

Discussion in 'Active Directory' started by pacer, Jul 28, 2006.

  1. pacer

    pacer Guest

    Is it possible to audit who deletes active directory user accounts as some
    users have mysteriously disappeared from some of user groups.

    Many thanks,

    pacer, Jul 28, 2006
    1. Advertisements

  2. pacer

    Jorge Silva Guest


    First you must enable Active Directory Auditing. You can do this by GPO "".

    I hope that the information above helps you

    Good Luck
    Jorge Silva
    Systems Administrator
    Jorge Silva, Jul 28, 2006
    1. Advertisements

  3. pacer

    Paul Bergson Guest

    You need to enable auditing and set auditing on "Account Management". I
    would set both success and failure to know who is doing what.

    Account Management logs accounts created, deleted, modified or renamed.
    Paul Bergson, Jul 28, 2006
  4. pacer


    Dec 13, 2011
    Likes Received:
    Yes, download Netwrix Active Directory Change Reporter or Quest Changeauditor—both will send real-time alerts and automated custom reports telling you exactly who changed what, when and where within Active Directory, so either of these will be able to tell you who is deleting AD user accounts.
    Jesse1113, May 15, 2012
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.