RE: [ActiveDir] Active Directory Log

[Rick Kingslan]

Title: Message

Rick,   Not as in a 'system restore point' if you will, in an automatic fashion.  IOW, if you haven't backed up the system and system state data to some near line of off-line media, then no - there is no backup method.   AD is multi-master replication.  All replicas will be converged within a specific time frame.  Mistakes can happen, as apparently you are aware of, but AD does not have intrinsic mechanisms in place to safeguard against them all.   I wish that I could offer more - but by default, the answer is still bleak.   Rick Kingslan  MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jones, Rick J.(Desktop Engineering) Sent: Tuesday, November 05, 2002 10:37 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory Log Doesn’t AD have a built in backup process it uses of any type at all?   Rick   -----Original Message----- From: Rick Kingslan [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 05, 2002 8:31 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Active Directory Log   Rick,   AFAIK, there is a whole list of 'No's' here, unless you had a third party object auditing tool.  At best, Windows 2000 auditing might be able to tell you which ID moved the computer object.  This would assume that auditing was on and that you were auditing AD objects, and that the Security log still has the relevant entries.  But, for the rest of them, Win2k doesn't have a facility to be able to tell you these things.   Apologies....   Rick Kingslan  MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.Microsoft.com/windowsxp/expertzone -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jones, Rick J.(Desktop Engineering) Sent: Tuesday, November 05, 2002 9:37 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Active Directory Log We had a list of computers that got moved to an incorrect OU.   Is there a way of looking on the Computer account to see what NT ID was used to move that computer?   Is there a way of looking on the Computer account to see what OU it was moved from?   Is there a way of looking in a log file somewhere in AD to tell this information if none of the above is available?   Would appreciate anyone’s input, I am dieing here to fix a booboo (HUGE ONE)   Thanks;   Rick