Event Details
User Activity->Object Access->Active Directory Object Access->ActiveRoles Server 6->EventID 1523 - Object is un-deprovisioned.
EventID 1523 - Object is un-deprovisioned.
 Sample:
Object is un-deprovisioned.

Operation GUID: 6a2728e0-61aa-4f97-863f-43fb969ec30b

Object name: Cecil Brown

Parent container: research.corp/Users

Object class: user

Object GUID: c7218b46-064a-471d-bcfd-200f921e5a0f
Log Type: Windows Event Log
 Uniquely Identified By:
Log Name: EDM Server
Filtering Field Equals to Value
Source EDM
EventId 1523
Field Matching
FieldDescriptionStored inSample Value
When At what date and time a user activity originated in the system. DateTime 10.10.2000 19:00:00
Who Account or user name under which the activity occured. User RESEARCH\Alebovsky
What The type of activity occurred (e.g. Logon, Password Changed, etc.) "AD Object Un-deprovisioned" AD Object Un-deprovisioned
Where The name of the workstation/server where the activity was logged. Computer DC1
Where From The name of the workstation/server where the activity was initiated from. Computer DC1
Severity Specify the seriousness of the event. "Low" Low
WhoDomain -
WhereDomain -
Result Successful or Failed "Successful" Successful
Object Name Object name Cecil Brown
Object Type Object class user
Whom InsertionString2 Cecil Brown
Parent container Parent container research.corp/Users
Comments
You must be logged in to comment