true.
I was looking rather for free tools, and i found the free eventriggers tool form the 2k3 rktools that did the job.
It alerts you in real time for a specific eventID. You can tell eventriggers to do a particular action such as using dumpel.exe to dump the 630 id (frecnh specific id i presume) that corresponds to a deleted object action.
Notice that eventriggers.exe only works on w2k3/XP machine.
Cheers,
Yann
Daniel Gilbert <[EMAIL PROTECTED]> a écrit :
Daniel Gilbert <[EMAIL PROTECTED]> a écrit :
Yann,
There are some utilities you can purchase that will alert you when an
object is deleted, added, modified...
Dan
> -------- Original Message --------
> Subject: [ActiveDir] Knowing when users were deleted.
> From: Yann <[EMAIL PROTECTED]>
> Date: Thu, October 13, 2005 11:56 pm
> To: [email protected]
>
>
> Hi there,
>
> I wonder if there is a way to know when a user has been deleted from AD other than using security audt, because at the time of the deletion, i forgot to activate the audit :(
>
> So my boss urge me to find the guilty user AND the time of deletion.
> I looked for attributes in adsi and found that there is the whencreated, whenmodified attribute but not whendeletedtimestamp one.
>
> Any idea ?
>
> Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
> Téléchargez le ici !
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
Téléchargez le ici !
