Missing user accounts from active directory

[bgfs]

We have a w2k active directory with three domain controllers. This morning we lost a number of accounts for no apperent reason. The accounts where from different OU's, with different usernames. We are running a typical enterprise with both 2000 and 2003 Servers, Exchange 2003, SQL 7 and 2000, McAfee Active Virus Defence (up to date). Nothing shows in the event logs of the domain controllers, no obvious causes. The AD has been restored from backup but we'd like to know what caused it in the first place. Anyone got any ideas?

 

[Roadki11]

I have had this happen to me 2 different times in the past year all be it on a 2k3 domain. I have no good info on what is causing it but installing updates in both cases seems to have fixed it, at least for a while. I have listed the 2 threads i have started for your reading pleasure. You figure this out please post a resolution.

RoadKi11

http://www.tek-tips.com/viewthread.cfm?qid=1175232&page=1

http://www.tek-tips.com/viewthread.cfm?qid=1302010&page=1

 

[markdmac]

I would suggest that you check DC replication. That is most likely the cause of the problem if the problem was not an accidental delete.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[Stevehewitt]

Should be an entry in the security logs if you have auditing setup.



Steve.

"They have the internet on computers now!" - Homer Simpson