Server 2012- Deleted 365 Accounts

Armin Karacic 1 Reputation point
2022-05-05T18:06:37.367+00:00

I have an issue on windows Server 2012. Where by am losing users on the AD without knowing the reason. I can find account in Azure under deleted and restore but I can't figure why 2-3 accounts per day being deleted?

Microsoft Entra
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Givary-MSFT 27,486 Reputation points Microsoft Employee
    2022-05-06T05:19:19.67+00:00

    @Armin Karacic

    Thank you for reaching out to us.

    I would like to start investigating the events logs from PDC to find out which Domain controller is triggering the account deletion.

    Do you have any scheduled tasks/start up scripts to clean up accounts ? Any pattern observed like user not logged in for N number of days ?

    Reference: https://www.manageengine.com/products/active-directory-audit/how-to/how-to-find-who-deleted-user-account.html

    If my understanding of the issue is incorrect, let me know we can connect offline to discuss further on the same.