Eventtriggers tool uses WMI WQL query as described in my previous
mail referring to the WMI scripting technique.
Nothing different except that you don't have to deal with a script
... but if you have a script you master the logic better.
/Alain
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yann
Sent: Friday, October 14, 2005 8:29 AM
To: [email protected]
Subject: RE: [ActiveDir] Knowing when users were deleted.
true.
I was looking rather for free tools, and i found the free eventriggers tool
form the 2k3 rktools that did the job.
It alerts you in real time for a specific eventID. You can
tell eventriggers to do a particular action such as using dumpel.exe
to dump the 630 id (frecnh specific id i presume) that corresponds to a
deleted object action.
Notice that eventriggers.exe only works on w2k3/XP machine.
Cheers,
Yann
Daniel Gilbert <[EMAIL PROTECTED]> a écrit :
Daniel Gilbert <[EMAIL PROTECTED]> a écrit :
Yann,
There are some utilities you can purchase that will alert you when an
object is deleted, added, modified...
Dan
> -------- Original Message --------
> Subject: [ActiveDir] Knowing when users were deleted.
> From: Yann <[EMAIL PROTECTED]>
> Date: Thu, October 13, 2005 11:56 pm
> To: [email protected]
>
>
> Hi there,
>
> I wonder if there is a way to know when a user has been deleted from AD other than using security audt, because at the time of the deletion, i forgot to activate the audit :(
>
> So my boss urge me to find the guilty user AND the time of deletion.
> I looked for attributes in adsi and found that there is the whencreated, whenmodified attribute but not whendeletedtimestamp one.
>
> Any idea ?
>
> Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
> Téléchargez le ici !
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Appel audio GRATUIT partout dans le monde avec le nouveau Yahoo! Messenger
Téléchargez le ici !
