I don't know if you're looking for free, low cost or what, but we use Active Administrator for reporting on modifications to user accounts, OUs, GPOs, etc.
Don Guyer Systems Engineer Information Services Prudential Fox Roach/ Trident 431 W. Lancaster Avenue Devon, PA 19333 Ph: (610) 993-3299 Fax: (610) 650-5306 www.prufoxroach.com [EMAIL PROTECTED] -----Original Message----- From: Thomas Mullins [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 05, 2008 9:39 AM To: NT System Admin Issues Subject: How to monitor deletion of user accounts Any thoughts on how to monitor the deletion of user accounts? I know to look for event code 630 in the security log, but this gets cumbersome across multiple domain controllers. I was thinking about trying to have the DC's log this information to a Cisco Mars box. If anyone has any info to share, it would be greatly appreciated. Thanks Shane ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ </pre> <table width="100%><tr><td class="body"> This email and any files transmitted with it are confidential<br> and intended solely for the use of the individual or entity to<br> whom they are addressed. It may contain information protected by <br> state and federal privacy and intellectual property laws.<br> If you have received this email in error please<br> notify the sender immediately and delete this e-mail from<br> your system. If you are not the named addressee you should<br> not disseminate, distribute or copy this e-mail, and you are<br> notified that disclosing, copying, distributing or taking any<br> action in reliance on the contents of this information is strictly prohibited.<br> </td></tr></table> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
