Security Question

[Deborah]

Hypothetical? Can it be determined how a (bogus) account within Active
Directory was created and who created the account? Or what workstation the
account was created from?

Thanks In Advance,


Deb

 

[Rob Elder, MVP-Networking]

You can take a look at the owner is AD to determine who created the account.
For all the other stuff, you need to turn on auditing for AD objects.