Neither have I which why I’m so concerned!!

I’m auditing everything and still nothing that points to a malicious account deletion.

 

The only think that I can think of is that with the File replication errors the forest was having that some accounts reached their tombstone period and we’re disabled, then they were possibly deleted by a local admin.

 

Thanks

 

Mike

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Tuesday, March 29, 2005 9:39 PM
To: [email protected]
Subject: RE: [ActiveDir] Accounts disappearing from AD

 

I have never seen an object disappear that wasn't deleted by some process, script, tool, or some admin...

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Hogenauer
Sent: Tuesday, March 29, 2005 10:36 AM
To: [email protected]
Subject: [ActiveDir] Accounts disappearing from AD

In the past 2 months I’ve had 4 accounts that have just disappeared without a trace from AD. I’ve turned up auditing on all my Domain controllers but I haven’t been able to find anything relevant.

 

I have 4 offices in WA, Ca, NC, and NY, I did have some replication errors but they have been fixed and none of the errors went past 60 days.

I also don’t have a lot of group policies running or scripts that run (I just recently inherited this environment) also I’ve made sure only a select few people have rights to the Directory.

 

Has anyone seen this or had accounts that just seem to vanish?

 

Thanks in advance.

 

Mike

 

 

Reply via email to