Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
User Account Getting Deleted Frequently in Windows 2008 Server

Answered User Account Getting Deleted Frequently in Windows 2008 Server

  • Saturday, March 02, 2013 8:31 AM
     
     
    Sign In to Vote
    0

    Hi,

        I am trying to create a user account in windows 2008 server. After couple of days the created user account getting deleted automatically. Plz suggest me some solution. where the user account created stays on permanently. 

     

All Replies

  • Saturday, March 02, 2013 4:32 PM
     
     
    Sign In to Vote
    0
    Is it a domain account or a local account?
     
  • Sunday, March 03, 2013 5:31 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

        I am trying to create a user account in windows 2008 server. After couple of days the created user account getting deleted automatically. 

    By default, user account will not get deleted once it's created, be it local or domain account. If account is getting deleted, it could be due to couple things viz: someone is deliberately deleting the account manually (may be another  admin who is unaware that, account is created for a purpose) or the machine is infected with virus or trojan !

    In any case, enable auditing on the server, make sure the AV is up to date and real time protection is enabled.

    Regards, Santosh

    I do not represent the organisation I work for, all the opinions expressed here are my own.

    This posting is provided "AS IS" with no warranties or guarantees and confers no rights.

    Whenever you see a helpful reply, click on Alternate Text Vote As Helpful & click on Alternate Text Mark As Answer if a post answers your question.

     
  • Sunday, March 03, 2013 6:07 AM
     
     Answered
    Sign In to Vote
    0

    This is not the default behavior of Windows 2008 server. The user cannot be deleted automatically, there should be some scheduled task running with a script or a user intervention. To find the root cause of the issue why the user is deleted you will have to check the event viewer Security logs.

    http://blogs.technet.com/b/abizerh/archive/2010/05/27/tracing-down-user-and-computer-account-deletion-in-active-directory.aspx

    http://www.arabitpro.com

     
  • Sunday, March 03, 2013 12:10 PM
     
     Answered
    Sign In to Vote
    0

    Hello,

    a user account will NOT be deleted automatically, there MUST be some interaction to achieve this. So please talk to your colleagues or enable auditing on the server/DC to see who is deleting this account.

    Is that server a workgroup server or domain member server or do you create this on a DC?

    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

     
  • Sunday, March 03, 2013 3:10 PM
     
     Answered
    Sign In to Vote
    0

    Hi,

        I am trying to create a user account in windows 2008 server. After couple of days the created user account getting deleted automatically. Plz suggest me some solution. where the user account created stays on permanently.

    Created user accounts are NEVER removed without having one of the following:

    • An administrator made the removal
    • A script made the removal
    • A program / malware program / application made the removal

    To be able to identify the source, you will to identify the user account / service account used for such operation and in this case you will need to enable the auditing.

    If the removal is done on an AD domain, refer to that: http://technet.microsoft.com/en-us/library/cc731607(v=ws.10).aspx

    Once the auditing is enabled, you will be able to find the events logged in the event viewer. Since filtering events in event viewer is not an easy task, you can use eventCombMT tool for filtering (http://support.microsoft.com/kb/824209) or other third party tools like AD Audit Plus.

    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.