RE: [ActiveDir] AD computer accounts being removed

[Gil Kirkpatrick]

You might enable auditing on the appropriate OU to find out who is doing the deleting. You  need to enable AD auditing in the Domain Controllers group policy, and then add auditing entries on the security descriptor of the appropriate OU, e.g CN=Computers to track creation and deletion of Computer objects. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Wednesday, January 18, 2006 12:24 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed Yes, their computer account in AD is actually gone.   Thanks, Brenda   Brenda Casey Network Manager Billings Public Schools [EMAIL PROTECTED] 406-247-3792   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gil Kirkpatrick Sent: Wednesday, January 18, 2006 11:14 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] AD computer accounts being removed When you say "lose their account", do you mean the computer object in AD disappears? Or something else?   -g From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Wednesday, January 18, 2006 10:42 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] AD computer accounts being removed Occasionally computers will lose their account in Active Directory for no apparent reason. Sometimes it is a computer that has just joined the domain, while other times the machine has been a member of the domain for 2 years.  The computer can only be logged on by a local account (not a domain account).  To remedy this, the computer has to be disjoined from the domain, join a workgroup, then join the domain again.  As I am sure you all are aware, this is not only time consuming, but very inappropriate to have to do.    Has anyone else had this experience and how have you fixed it?   Thanks, Brenda