Any event log if I delete an OU in W2K3 AD server

[LoYeah]

Hi all,

Can I get a event log message after I delete an OU in W2K3 Ad server?

Many thanks

 

[supportahm1980]

Probably. Test on a OU. Then check the security logs to see what event ID # it created. They you can use GFI or a vbscript to look for that even ID every 1 minute or so and alert you. I use GFI and have it alert me of password resets, users added to domain admins etc.

 

[pagy]

You'd need to enable auditing to capture this in the event log, or use a 3rd party product. Have a google for AD auditing, below is a link to some info on auditing

http://www.comptechdoc.org/os/windows/win2k/win2kauditing.html

Paul

MCSE 2003

"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein