ADUC offline and user accounts disabled

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have a WIN2K domain running one older DC with all MS updates installed.
Occasionally I attempt to access ADUC and find it unavailable and I have do a
restart to be able to access it. AN additional item has just happened. I had
about 6 user account that were disabled. They were all logged into the domain
and operating normally when they started receiving access denied messages. I
discovered that their accounts had been disbaled in ADUC. I have spoken to
all that have domain admin rights and no one admits to disabling any
accounts. Are there any known issues like this? Is there an Active Directory
fix tool to clean up and verify AD operation? Can a Security Audit, or
something else, be setup to monitor ADUC and tell me when/who disabled any
user accounts? Any ideas would be greatly welcomed. Thanks.
 
Linn,

I would suggest that you limit who has 'Domain Admin' level of access. This
is going to be a problem for you...

I would also suggest that you download and install the ALTools.exe from the
MS web site. This will also help you.

I would then also suggest that you take a look at this link -
http://www.microsoft.com/windows200...center/help/developing_an_auditing_policy.htm

HTH,

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)
 
Back
Top