[NTSysADM] Windows Server 2008 R2 Role removal log

[elsalvoz]

Hello All,

Is there a way to review who or what caused the removal of a server role?

We encounter a situation where the "file server role" was removed from 2 of
our Windows 2008 R2 servers. Our SCCM application became unavailable due to
those changes.

Any pointers would be greatly appreciated.

Thanks,
Cesar