ADUC offline and user accounts disabled

G

Guest

I have a WIN2K domain running one older DC with all MS updates installed.
Occasionally I attempt to access ADUC and find it unavailable and I have do a
restart to be able to access it. AN additional item has just happened. I had
about 6 user account that were disabled. They were all logged into the domain
and operating normally when they started receiving access denied messages. I
discovered that their accounts had been disbaled in ADUC. I have spoken to
all that have domain admin rights and no one admits to disabling any
accounts. Are there any known issues like this? Is there an Active Directory
fix tool to clean up and verify AD operation? Can a Security Audit, or
something else, be setup to monitor ADUC and tell me when/who disabled any
user accounts? Any ideas would be greatly welcomed. Thanks.
 
C

Cary Shultz

Linn,

I would suggest that you limit who has 'Domain Admin' level of access. This
is going to be a problem for you...

I would also suggest that you download and install the ALTools.exe from the
MS web site. This will also help you.

I would then also suggest that you take a look at this link -
http://www.microsoft.com/windows200...center/help/developing_an_auditing_policy.htm

HTH,

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top