Printable View
What should I do if there is some kind of Event ID created when a user account is deleted. Because now there is no indication or notification on the screen that says anything about account deleting. And no one in my office says whether they had did it or not. I need some kind of auditing feature that can tell me when and who has deleted a account. I want complete information on the same so that I can catch those people.
You can do that using Audit Account management. I am giving you a link that will give you enough information on enabling audit for account management. This works really well. With this you can find who has created a account or group, what changes are done to the account and who has deleted. Also it gives you information on account rename and many more stuff. It offers you a complete log info on changes done to a account.
Audit account management
For this you have to work on server audit policy. That is the only thing that will give you enough information on what changes are being done to your account. I do not thing there is any third party tool available for the same. It is not at all complicated to configure audit policies here. It works really well without much problem.