How to audit what was done in AD?

if a user modifies an object in AD how do you audit that?  We had some computer accounts deleted and no one will admit to it so I want to know in the future how to prove who did this.
mqh7

Hi,
Here is a more detailed article below for you:
AD DS Auditing Step-by-Step Guide
http://technet.microsoft.com/en-us/library/cc731607(v=WS.10).aspx
Regards,
Amy

Similar Messages

  • How to I undo what was done after clicking on a link from a spammed email?

    Hello...
    I am usually Never one to click on any suspicious emails, let alone links within the emails, but I recieved an email from my Uncle that looked slightly suspicious, but I let myself click on the link within it. It turned out to be a spammed email with a BS link from "msnbc" reharding jobs. What happened when I clicked that spammed link, and what can I do to undo what was done? I am terrified that I unintentionally installed something on my Mac Air through clicking on this link. What do I need to do to erase what was do, and how to I find out what was done? Thank you very much for your help. I greatly appreciate any advice.

    Without knowing what webpage the link opened and what you did after you opened it, it is impossible to be 100% certain of anything that may have resulted from that. An email itself cannot install anything. If the webpage did not result in any unusual activity, and you did not deliberately install or supply any personal information then you have no cause for concern.
    "Unusual activity" would include symptoms such as a webpage you cannot close or navigate away from, and that would be a mere nuisance that is easily solved. If Safari or the browser you used is behaving normally then rest easy.
    Most of these spam emails do nothing but bombard you with ads or attempt to install a browser "toolbar" that does the same. Malicious emails include phishing scams and most of them are laughable (but they are getting better). Others carry Windows malware that cannot affect your Mac.
    To edit your profile click on your name at the top of this page (where it says Welcome, saratee14), scroll down to the heading My Products, click edit, and on the page that follows select your version of OS X from the dropdown menu. The only reason I questioned this was to confirm you have been updating OS X.

  • How to Reference What Was Clicked in a TileList using an ItemRenderer

    Hi,
    I've got a Tilelist and I'm using an ItemRenderer, which is a Button.
    I don't understand how to reference what was clicked. So, if the first tile (which is the first Obect) is clicked, how do I know that that particular one was clicked.
    <mx:TileList 
        id="myTL"
        dataProvider="{myAC}"
        width="400"
            height="400"
            columnCount="2"
            rowCount="2" />
    <mx:ArrayCollection id="myAC">
        <mx:Array>
        <mx:Object id="first" label="1" />
        <mx:Object label="2" />
        <mx:Object label="3" />
        <mx:Object label="4" />
        </mx:Array>
    </mx:ArrayCollection>
    ItemRenderer:
    <mx:Button xmlns:mx="http://www.adobe.com/2006/mxml"
    click="Alert.show( 'This was Clicked')">
    <mx:Script>
    <![CDATA[
    import mx.controls.Alert;
    ]]>
    </mx:Script>
    </mx:Button>
    Thank you.
    -Laxmidi

    Hi Laxmidi,
    Using the itemClick event you can acheive this using the event Object. Check the sample code below:
    <?xml version="1.0" encoding="utf-8"?>
    <mx:Application 
    xmlns:mx="http://www.adobe.com/2006/mxml">
    <mx:Script>
    <![CDATA[
    import mx.events.ListEvent; 
    import mx.controls.List; 
    import mx.controls.Alert; 
    import mx.events.ItemClickEvent; 
    private function onItemClick(event:ListEvent):void
    var strAlert:String = "Item Row Index Clicked : " + event.rowIndex + "\n";strAlert +=
    "Item Column Index Clicked : " + event.columnIndex + "\n";Alert.show(strAlert);
    ]]>
    </mx:Script>
    <mx:TileList id="myTL" dataProvider="{myAC}" itemClick="onItemClick(event)" width="400" height="400" columnCount="2" rowCount="2">
    <mx:itemRenderer>
    <mx:Component>
    <mx:Button xmlns:mx="http://www.adobe.com/2006/mxml" click="Alert.show( 'This was Clicked')">
    <mx:Script>
    <![CDATA[
    import mx.controls.Alert;]]>
    </mx:Script>
    </mx:Button>
    </mx:Component>
    </mx:itemRenderer>
    </mx:TileList>
    <mx:ArrayCollection id="myAC">
    <mx:Array>
    <mx:Object id="first" label="1" />
    <mx:Object label="2" />
    <mx:Object label="3" />
     <mx:Object label="4" />
     </mx:Array>
     </mx:ArrayCollection>
     </mx:Application>
    You can also try this by writing the Click event on the Button in the TileList itemRenderer as well where you can access easily the data of the itemClicked easily using the data Object.
    Thanks,
    Bhasker

  • It's possible to audit what was changed in tables ?

    Hi,
    I need to audit what was changed in some tables in my ECC 5.0 sytem.
    It's possible ?
    I know Tcode SM19 and SM20 has some audit options, but i didn't find anything about what was changed in tables.
    Thanks.

    Hi ,
    There are few ways by which u can trace the Changes made by User.
    1. Goto Tcode  SE03
    2. Double click on Search for objects in Requests/Tasks
    3. Enter the table/view name you want to find the changes in.
    4. Execute.
    In this case, you will find all the change request/tasks that were used to make modifications in the table. Provided, you have settings to record all the chanes made in your SAP system in change requests.
    Go to SE11---> Select Display  mode
    Go to Utilities Tab---->Version--> version Management
    check out the last change in the transport request.
    Otherwise Checkout  for the attributes of the table in SE11 transaction.
    Thanks
    Ramakrishna.

  • My apple ID acct was updated this morning, and it wasn't me.  (credit card info).  What was done to my account?

    My apple ID acct was updated this morning, and it wasn't me.  (credit card info).  What was done to my account?

    This was the email content:
    Dear Crystal Stewart,
    The following changes to your Apple ID ([email protected]) were made on May 28, 2014 at 5:26:47 AM (GMT):
    Credit card
    If you need additional help, contact Apple Support.
    Apple Support

  • How to tell what was the latest patch installed on VMware ESX Server 3i, 3.5.0, 207095

    Hello Guys,
    I have been running an old server that was installed as a test system on a DELL workstation - Optiplex GX620 (32 bit).
    During the installation I had to confirgure the file: /usr/lib/vmware/installer/Core/TargetFilter.py to change the following line:
    "return interface.GetInterfaceType() == ScsiInterface.SCSI_IFACE_TYPE_IDE" to read:
    "return interface.GetInterfaceType() == ScsiInterface.SCSI_IFACE_TYPE_ISCSI" this made it worked and I have been using it for 3 years now. However, at this time I was hoping to update it with the latest patches and updates and I cannot figure out if I have ESXi or just ESX, nor what was my last update and what is required next.
    I have used this command to get the following output:
    # vmware -v
    VMware ESX Server 3i 3.5.0 build-207095
    ... I believe the 3i indicates that I have an ESXi 3.5.0 but is build-207095 the same buid as ESXi 3.5.0 Update 5?
    If not, how do I go about updating it? What is the KB # I should download?
    I can manage it using vSphere Client 5.5 and I can SSH into it using Putty.
    Note: When I run... "# esxupdate --bundle=ESXe350-201302401-I-SG.zip update" from within the folder where its at in the datastore, nothing happens... just a new line is scrolled.
    Also...
    # esxupdate query
    <?xml version="1.0"?>
    <query-response>
      <installed-packages>
        <package ID="ESX-207095">
          <name>firmware</name>
          <version>3.5.0</version>
          <rel>207095</rel>
        </package>
        <package ID="ESX-CLIENT-204907">
          <name>viclient</name>
          <version>2.5.0</version>
          <rel>204907</rel>
        </package>
        <package ID="ESX-TOOLS-207095">
          <name>tools</name>
          <version>3.5.0</version>
          <rel>207095</rel>
        </package>
      </installed-packages>
    </query-response>
    /vmfs/volumes/525300ce-5ff6ad3d-e2ed-0014222aedb7/Patches/ESXe350-201302401-O-SG #
    ... is there any further update for this system? I believe so as the Heartbleed patch etc. was not around when I was installing this server back in 2010.

    Hello Richardson Porto,
    I wanted to tell you that I appreciate the help so far.
    Also wanted to point out to you, that the KB indicated above is older than Update 5, which from your instructions is what I have installed. That KB is for U2.
    Now, the document definitely has step by step instructions on installing, querying etc. But my problem is ... NOT ALL COMMANDS WORK FOR ME!
    This is why I am here because all the instructions I have been reading does not work with my flavor of ESX 3.5.0, 207095... WHY? It has me stumped.
    For example, here are some commands the doc asked me to do and they failed: (Note that I had to unzip the folder on my windows box and upload it to /tmp using vSphere Client)
    /tmp # ls
    ESX350-201302402-BG      ESX350-201302402-BG.zip  vmhsdaemon-0
    /tmp # unzip ESX350-201302402-BG.zip
    -ash: unzip: not found                                                                                          -----------------------THIS COMMAND WAS NOT FOUND ?
    /tmp # cd ESX350-201302402-BG
    /tmp/ESX350-201302402-BG # esxupdate info
    Invalid command info                                                                                          -----------------------THIS COMMAND WAS INVALID ?
    /tmp/ESX350-201302402-BG # esxupdate update                                       -----------------------NOTHING HAPPENED HERE ?
    /tmp/ESX350-201302402-BG # ls -lh
    -rw-------    1 root     root       321.3k Dec 13 15:24 VMware-esx-scripts-3.5.0-988599.i386.rpm
    -rw-------    1 root     root         1.6k Dec 13 15:24 contents.xml
    -rw-------    1 root     root          701 Dec 13 15:24 contents.xml.sig
    -rw-------    1 root     root         1.4k Dec 13 15:24 descriptor.xml
    drwxr-xr-x    1 root     root          512 Dec 13 15:24 headers
    /tmp/ESX350-201302402-BG #
    NOTE: All these commands were run sequentially and I just copied and paste it from my SSH Client (PuTTy.exe)
    Is there a toolkit I need to install to have these commands or what really am I missing here? Host is in Maintenance Mode and the 1 VM that's on it is off!
    I am going to start a new discussion with this NEW ISSUE, since the Heading of this DISCUSSION has already been SOLVED! Thanks again!

  • How to get what was typed on a window which is inside another window

    Hey guys!
    I'm having a problem, i have created a program and when you click on a certain button a small window appears which was created from a class that i named Window...anyway this small window asks for a name, but somehow i can't send what was written in that window to the program that contains the main window...
    i've tried creating a method in the class Window, which is called public String returnName(){ return, name;} but this doesn't return anything.
    i hope you guys understand what i'm trying to say, if you do, any ideas of how i could do this???!!
    -O.D.

    this is the class Name1Window:
    import java.awt.*;
    import java.awt.event.*;
    import javax.swing.*;
    import java.io.*;
    import javax.swing.JTextField;
    public class Name1Window extends Frame implements ActionListener, WindowListener
         Label name;
         TextField txName;
         Button ok;
         Panel Pnl, PnlName, PnlOk;
         private String n;
         private String ln;
         public Name1Window()
              n= "";
              ln="";
              setSize(200,110);
              setTitle("Search");
              Pnl= new Panel();
              Pnl.setLayout(new GridLayout(2,1));
              PnlName= new Panel();
              PnlName.setLayout(new GridLayout(2,2));
              PnlOk=new Panel();
              PnlOk.setLayout(new GridLayout(1,1));
              name= new Label("Name");
              txName= new TextField(10);
              ok= new Button("OK");
              PnlName.add(name);
              PnlName.add(txName);
              PnlOk.add(ok);
              Pnl.setBackground(new Color(161, 187, 241));
              Pnl.add(PnlName);
              Pnl.add(PnlOk);
              add(Pnl);
              ok.addActionListener(this);
              addWindowListener(this);
         public void actionPerformed(ActionEvent e)
          {//If the user clicks ok:
               if(e.getSource()==ok)
                    String n1, ap1;
                   n1= txName.getText();
                   //calls the method save name and sends whatever was typed in txName:
                   saveName(n1);
                    dispose();
         public void saveName(String n2)
              this.n= n2;
              //If you write a System.out.println(n) it WILL print what was typed!!
               public String returnName()
              return n;//It's gonna return a " "
               public void windowClosing(WindowEvent e)
               //It exits the small window; Name1Window
               dispose();
                public void windowOpened(WindowEvent e){}
          public void windowClosed(WindowEvent e){}
          public void windowActivated(WindowEvent e){}
          public void windowDeactivated(WindowEvent e){}
          public void windowIconified(WindowEvent e){}
          public void windowDeiconified(WindowEvent e){}
    }

  • How to view what was returned in wwsec_api.person_info

    How would someone go about viewing what was returned in wwsec_api.person_info, I understand it returns a record but I'm not sure what the columns are other than a few that I figured out such as first_name, last_name.

    Andrew,
    This information is stored in the Oracle Internet Directory (OID). The PDK-June (available very soon) contains 2 sample portlets accessing user information from the OID, such as first name, last name, or email address.
    Note, that your portal version must be 9.0.2.6, or higher to get these portlets to work.
    The is_runnable functionality on the Java side is implemented in the form of security managers.
    Hope this helps,
    Peter

  • I have a charge of $33.78 on my account and I have not idea how to view what was purchased for that amount...can anyone help me find out?

    Shouldn't there be a way to view what has been purchased and when on your account!!!  Or at the very least I should be able to speak to SOMEBODY about my account!

    You have always been able to view your purchase history.  Go to your account in the itunes store. The drop down menu will show when you click the arrow next to your user name.

  • Templates - how to tell what target is using what template

    Trying to figure out who or what target is using what monitoring template? Anyone can suggest a way? Are only groups use monitoring templates?
    Thanks
    Roman

    Hi,
    As far as i know, you can find out this. Monitoring template is a template which you create and then apply to targets (so that you avoid setting metrics for individual targets one by one). You can apply a template on a single database or on a group by adding all databases in a group. Once you apply template, template metric thresholds will be set for that target based on the template and still you can modify certain metrics for this target. So it means that on a single target you can have metric set through template and also set manually thus it is not possible to find out what was implemented through template and what was done manually.
    Salman

  • Is it possible to turn off the fluid grid function in dreamweaver during the process of building your site by mistake? It was working fine and simply stopped and I don't see how to correct what is wrong.

    Is it possible to turn off the fluid grid function in dreamweaver during the process of building your site by mistake? It was working fine and simply stopped and I don't see how to correct what is wrong.

    There is no specific function that turns FGL on or off.
    When you say that it has stopped, do you mean that the handles no longer show?
    If that is the case, then I think you may have modified the CSS to such an extent that Dreamweaver no longer recognises it as belonging to FGL.
    There are a couple of avenues for you
    Redo the site and make sure not to touch the FGL CSS
    paste the code here so that we can see what has gone wrong.

  • HT5624 I would like to change ,my password. I signed in but I don't know what was my answer for the 2 security question. How can I change my password?

    would like to change ,my password. I signed in but I don't know what was my answer for the 2 security question. How can I change my password?

    Hello, dot mac & MobtleMe no longer exist, though it may be possible to still use a dot mac addy... or maybe not if expired.
    You cannot use .mac or MobileMe as type of Account, you have to choose IMAP when setting up, otherwise Mail is hard coded to change imap.mail.me.com to mail.me.com & smtp.mail.me.com to smtp.me.com, no matter what you try to enter.
    iCloud Mail setup, do not choose .mac or MobileMe as type, but choose IMAP...
    On second step where it asks "Description", it has to be a unique name, but you can still use your email address.
    IMAP (Incoming Mail Server) information:
        •    Server name: imap.mail.me.com
        •    SSL Required: Yes
        •    Port: 993
        •    Username: [email protected] (use your @me.com address from your iCloud account)
        •    Password: Your iCloud password
    SMTP (outgoing mail server) information:
        •    Server name: smtp.mail.me.com
        •    SSL Required: Yes
        •    Port: 587
        •    SMTP Authentication Required: Yes
        •    Username: [email protected] (use your @me.com address from your iCloud account)
        •    Password: Your iCloud password
    Also, you must upgrade your password to meet the new criteria:  8 characters, including upper and lower case and numbers.  If you have an older password that does not meet these criteria, when you try to setup mail on your mac, using all of the IMAP criteria listed above, it will still give a server error message.  Go to   http://appleid.apple.com         then follow directions to change your password, then go back to setting up your mail using the IMAP instructions above.
    Thanks to dpepper...
    https://discussions.apple.com/thread/3867171?tstart=0

  • After upgrading to the newer version of Firefox, a lose all my tabs every time I close. I've done what was suggested in the FAQx, but I still lose them all when I close. I want to fix this. How?

    I want to know how to have my tabs save when I close Firefox. I did what was suggested in the FAQs section, but all my tabs disappear every time I close Firefox, whether using the "exit" command, or the "X" button. This was the very reason I never updated to the new version previously, but had hoped that the problem had been addressed and upgraded, now I'm stuck with having to reopen every tab every time I open Firefox. Please tell me there is a way to correct this. And, I'm not fluent in technospeak, so I need simple, basic instructions. Thank you. Mark

    Hi,
    Pressing '''Alt''' + '''T''' on the keyboard brings up the '''Tools''' menu.
    To see the full menu bar temporarily, press '''Alt''' or '''F10'''.
    To make the menu bar permanently visible, right-click on the '''+''' after the last tab and enable (tick) '''Menu Bar''' or press '''Alt''' + '''V''' > '''Toolbars''' > '''Menu Bar'''.
    [https://support.mozilla.com/en-US/kb/Options%20window All about Tools > Options]
    [https://support.mozilla.com/en-US/kb/Keyboard%20shortcuts Keyboard Shortcuts]
    Useful links:
    [http://kb.mozillazine.org/About:config Going beyond Tools > Options - about:config]
    [http://kb.mozillazine.org/About:config_entries about:config Entries]
    [https://support.mozilla.com/en-US/kb/Page%20Info%20window Page Info] Tools (Alt + T) > Page Info, Right-click > View Page Info
    [https://support.mozilla.com/en-US/kb/Viewing%20video%20in%20Firefox%20without%20a%20plugin Viewing Video without Plugins]
    [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder & Files]
    [https://developer.mozilla.org/en/Command_Line_Options#Browser Firefox Commands]
    [https://support.mozilla.com/en-US/kb/Basic%20Troubleshooting Basic Troubleshooting]
    [https://support.mozilla.com/en-US/kb/common-questions-after-upgrading-firefox-36 After Upgrading]
    [https://support.mozilla.com/en-US/kb/Safe%20Mode Safe Mode]
    [http://kb.mozillazine.org/Problematic_extensions Problematic Extensions]
    [https://support.mozilla.com/en-US/kb/Troubleshooting%20extensions%20and%20themes Troubleshooting Extensions and Themes]
    [https://support.mozilla.com/en-US/kb/Troubleshooting%20plugins Troubleshooting Plugins]
    [http://kb.mozillazine.org/Testing_plugins Testing Plugins]

  • How to find out what was imported from a dump file

    Hi.
    I got the dump file from a group and they told me to import it. Import job went successfully without errors as following:
    Import: Release 9.2.0.6.0 - Production on Mon Oct 16 20:53:12 2006
    Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
    Connected to: Oracle9i Enterprise Edition Release 9.2.0.6.0 - 64bit Production
    With the Partitioning, OLAP and Oracle Data Mining options
    JServer Release 9.2.0.6.0 - Production
    Export file created by EXPORT:V09.02.00 via conventional path
    Warning: the objects were exported by OPS$ORACLETS, not by you
    import done in US7ASCII character set and UTF8 NCHAR character set
    import server uses WE8ISO8859P1 character set (possible charset conversion)
    export server uses AL16UTF16 NCHAR character set (possible ncharset conversion)
    . importing OPS$ORACLETS's objects into SYS
    . importing BDS_APP's objects into BDS_APP
    Import terminated successfully without warnings.
    How do i find out what was imported from a dump file?

    another way would be to just list the contents of the dump file
    imp user/pass file=dumpfile show=Y

  • Actions; how do I find what commands don't work in actions?

    [Photoshop CS4, MacOS 10.5.8]
    I'm frustrated in trying to create an action make a channel into a layer. 
    Sounds easy, right?
    I'm got hung up on several issues though, which raised a bigger question:
    • In the approach I'm taking, I want to select the target channel during the action. 
    When I click on Channel X during recording, the action records the step as
    "Select X Channel"
    Unfortunately the particular channel is hardwired into this command so that would
    mean making three different versions of the action.  I have tried looking for a
    more general form of the command, like Select Channel that then takes the
    particular channel as a parameter, e.g. from a drop-down menu.  That at least
    would work in an action. But no such.  (I tried some other ideas like using
    Calculate or Channel Mixer which come close but not close enough.)
    There's a more lame design: selecting the channel before recording the action, then
    creating and deleting extra "internal" channels in the action -- it does work but it
    isn't where I started so I lost a lot of time trying to find something that appears not
    to exist.
    • The lurking question here is how you find
    (a) whether there even exists an actual generic form of a command
      (b) whether the command works in a way that makes it possible to use in an action
    Web searches don't lend themselves to finding information like "what commands
    don't work in actions".  I would really appreciate pointers to any in-depth documents
    on what commands a user can't get at for recording in actions.

    Sorry about the last post, but i knew i had recorded selecting channels by the number instead of the name.
    Well i found one of my older actions which must have been recorded in an old version of photoshop that named the channels with numbers.
    Anyway, see if this action helps you any. (you have to copy the steps to your action)
    https://acrobat.com/#d=DgfhMCZzmUgKlefycUsnJg
    In an RGB color image: channel 1 is the red channel
                             and
    channel 9 is the alpha 6 channel
    Message was edited by: R_Kelly

Maybe you are looking for