Just wanted to know if I have a Windows Server 2008 which I use as domain controller since 2015.
where in users were created, disabled, deleted since 2015 on wards.
The Windows Team brought a new hardware recently in 2020 , where Windows 2016 OS was installed with Active directory and the user and groups from current AD were migrated to the new OS.
Recently there was an Internal Audit and the Auditor asked for few evidences for the past users account disabled , deleted etc. Some of these AD user accounts were disabled and deleted in 2018 and 2019.
But now the Windows Team says the dates will all show 2020 (the date of migration) for all the objects which were disabled or deleted in the past.
Is this how the normal migration process works for Microsoft active directory . Shouldn't it restore the original dates when a user object was created , disabled or modified v/s when it was migrated to maintain an objects Auditing and compliance records.
AD experts can provide their view.
is there a way to get the actual user disabled and modified details now from somewhere.
This is an on premises Active Directory Install scenario.