Active Directory Logs are Gone! What do I do?

  • Thread starter Thread starter Stewart Saathoff
  • Start date Start date
S

Stewart Saathoff

Hello,

I recently had a report that the users on the network are experiencing long
delays when logging into the server and I noticed some errors in the event
viewer under NTDS KCC that were numbered 1130. After checking, I found no
KB articles on the subject and commenced to searching on my own throughout
the system. I found that the directory that the log files were, is now
empty. What do I do now?

Stewart
 
Restore from backup if you have one? What logs are you looking for exactly,
do you mean the Event Viewer logs?
It is sometimes said that hackers may delete logfiles to cover their own
tracks, I certainly don't think Windows would ever delete log files of its
own accord.
 
Back
Top