How to find when "AD Object" was deleted ?

Welcome Forums General PowerShell Q&A How to find when "AD Object" was deleted ?

This topic contains 1 reply, has 2 voices, and was last updated by

1 year, 9 months ago.

  • Author
  • #71930

    Points: 0
    Rank: Member

    I'm trying to find out when was an ad-object deleted

    Get-ADObject -Filter {(isdeleted -eq $true) -and (name -ne "Deleted Objects")} -includeDeletedObjects -property *

    Doesn't show when it was deleted .. Just curious, is there a way to find out ?

  • #71942

    Points: 41
    Rank: Member

    It's not particularly straightforward. I really recommend watching Ashley McGlone's AD Forensics session from Summit 2016. The whole video is worth watching but to answer your specific query, watch from 30 minutes onwards:

The topic ‘How to find when "AD Object" was deleted ?’ is closed to new replies.

denizli escort samsun escort muğla escort ataşehir escort kuşadası escort