Event Details
User Activity->Object Access->Active Directory Object Access->ActiveRoles Server 6->EventID 1513 - Object is deleted.
EventID 1513 - Object is deleted.
 Sample:
Object is deleted.

Operation GUID: be6b80a8-ac15-42f8-9bcc-5734820acd7f

Object name: Copy Cecil Brown

Parent container: research.corp/Project Managers

Object class: user

Object GUID: 72507be2-4347-4109-828c-cc1585b66569
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: EDM Server
Filtering Field Equals to Value
Source EDM
EventId 1513
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 10.10.2000 19:00:00
Who Account or user name under which the activity occured. User RESEARCH\Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "AD Object Deleted" AD Object Deleted
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Computer DC1
Severity Specify the seriousness of the event. "Medium" Medium
WhoDomain -
WhereDomain -
Result Successful or Failed "Successful" Successful
Object Name Object name Copy Cecil Brown
Object Type Object class user
Whom InsertionString2 Copy Cecil Brown
Parent container Parent container research.corp/Project Managers
Comments
You must be logged in to comment