2 replies
by bfilmfan
You could use MOM to alert on Security Event 624, which is a user account creation and 645 for Computer Accounts in the Event Logs.
You would need to be monitoring for successful events.
Youc an pick up a pre-written WMI script that you can modify here:
http://emea.windowsitpro.com/WindowsScripting/Article/ArticleID/19829/19829.html
You are looking for the wmievents.vbs script.
Enjoy.
by dryflies
There was a win2k server newsletter article just today about a script that with a few mods will do exactly that.
it included a download:
https://www.techrepublic.com.com/5138-1035-5650586.html?tag=nl.e116
Modify the script to run periodically. add a function at the beginning of the script to check for newdatafile.txt. if it exists, rename it to olddatafile.txt. Next output the AD information to a text file named newdatafile.txt. Use a diff program to highlite any differences between the two files. There are several of these diff files around with various names. FC is one that comes with Win XP. type help FC to figure out how to use it and how to format its output to your liking. The results of FC will be any changes to your AD from the last time the script was run. you can use dates in the filename to keep a running log of changes and if you get really motivated could modify the script to provide some roll-back functionality.
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending