RE: Domain Admin monkey business

2008-05-05 Thread Barsodi.John
Check the Account Operators group? -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Monday, May 05, 2008 10:30 AM To: NT System Admin Issues Subject: Domain Admin monkey business I've been on vacation for a couple of weeks, and came back to a bit of a situation. The

Re: Domain Admin monkey business

2008-05-05 Thread Kurt Buff
Just did - they're not in there either. On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED] wrote: Check the Account Operators group? -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Monday, May 05, 2008 10:30 AM To: NT System Admin Issues

RE: Domain Admin monkey business

2008-05-05 Thread James Winzenz
] Posted At: Monday, May 05, 2008 10:49 AM Posted To: NTSysadmin Conversation: Domain Admin monkey business Subject: Re: Domain Admin monkey business Just did - they're not in there either. On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED] wrote: Check the Account Operators group

Re: Domain Admin monkey business

2008-05-05 Thread Kurt Buff
Found it. Someone put the group in the Administrators group. I'm quite unhappy, and I'm investigating. On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED] wrote: Check the Account Operators group? -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent:

Re: Domain Admin monkey business

2008-05-05 Thread Steve Ens
Fire them all! or at least fifty lashes. On Mon, May 5, 2008 at 12:56 PM, Kurt Buff [EMAIL PROTECTED] wrote: Found it. Someone put the group in the Administrators group. I'm quite unhappy, and I'm investigating. On Mon, May 5, 2008 at 10:37 AM, Barsodi.John [EMAIL PROTECTED] wrote:

Re: Domain Admin monkey business

2008-05-05 Thread Kurt Buff
I suspect a contractor brought in to cover while I was gone, but I'm parsing logs now to see if I can determine that. Fortunately, I syslog everything I can, so should be able to track it down fairly quickly. On Mon, May 5, 2008 at 10:59 AM, Steve Ens [EMAIL PROTECTED] wrote: Fire them all! or

RE: Domain Admin monkey business

2008-05-05 Thread Kim Longenbaugh
System Admin Issues Subject: Re: Domain Admin monkey business I suspect a contractor brought in to cover while I was gone, but I'm parsing logs now to see if I can determine that. Fortunately, I syslog everything I can, so should be able to track it down fairly quickly. On Mon, May 5, 2008 at 10

Re: Domain Admin monkey business

2008-05-05 Thread Kurt Buff
Issues Subject: Re: Domain Admin monkey business I suspect a contractor brought in to cover while I was gone, but I'm parsing logs now to see if I can determine that. Fortunately, I syslog everything I can, so should be able to track it down fairly quickly. On Mon, May 5, 2008 at 10

RE: Domain Admin monkey business

2008-05-05 Thread Christopher Boggs
Issues Subject: Re: Domain Admin monkey business I suspect a contractor brought in to cover while I was gone, but I'm parsing logs now to see if I can determine that. Fortunately, I syslog everything I can, so should be able to track it down fairly quickly. On Mon, May 5, 2008 at 10:59 AM, Steve Ens

Re: Domain Admin monkey business

2008-05-05 Thread Kurt Buff
access was given, it just says what object, who did it, and at what time. Should be enough to figure it out, though. -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Monday, May 05, 2008 1:01 PM To: NT System Admin Issues Subject: Re: Domain Admin monkey