How do I find out what changes are going on in my Active Directory?

re: How do I find out what changes are going on in my Active Directory?

Herbert Mauerer [MSFT] — Mon, 06 Dec 2010 13:14:58 GMT

We have recently seen excessive deleted DNS record problems. With Windows Server 2008 R2 DNS Service, these seem to be turned into Active Directory Tombstones immediately.

So in order to spot these, you need to look for deleted objects in either the domain NC or the DNS Application NCs ForestDnsZones and DomainDnsZones.

In one instance, this was due to VoIP clients ending up with a broken configuration through DHCP, and hammering the DNS server with re-registrations was their fall-back. Nice one...

re: How do I find out what changes are going on in my Active Directory?

Herbert Mauerer [MSFT] — Tue, 09 Nov 2010 15:34:15 GMT

Maybe a better way to export the current status of the USN on the DC you’re working with:

ldifde /s %computername% /d "" /p base /l highestCommittedUSN /f highest-usn-%computername%-101104.txt

The file will contain:

dn:

changetype: add

highestCommittedUSN: 1189530

It lands in a file always, so you can then perform future difference exports with this USN so you don’t have any gaps in object change/creation reporting.

BlogMS Weekly Articles Published – 16th March to 22nd March

BlogMS - Official Microsoft Team Blogs — Mon, 23 Mar 2009 14:35:53 GMT

237 Microsoft Team blogs searched, 109 blogs have new articles in the past 7 days. 270 new articles found

4sysops - Download IE8 - IE8 Review - IE VHDs - Find out changes in Active Directory - Technet Magazine April issue

Fri, 20 Mar 2009 03:06:06 GMT

PingBack from http://4sysops.com/archives/download-ie8-ie8-review-ie-vhds-find-out-changes-in-active-directory-technet-magazine-april-issue/