CA Client Automation

  • Private Community

  • 1.  how to know who delete a obsolete computer group?

    Posted Jul 24, 2017 08:47 AM

    Could Windows event viewer logs the user that deleted a group? Not for punishment, just for identify the cause.

     

    Regards,

     

    Marcio Souza



  • 2.  Re: how to know who delete a obsolete computer group?
    Best Answer

    Broadcom Employee
    Posted Jul 24, 2017 10:12 AM

    If you configure it in policy yes.

     

    Richard Lechner

    Principal Engineering Services Architect

     

    CA Technologies

    Mobile: +1 703 655 7161 | Richard.Lechner@ca.com

     

    <mailto:Richard.Lechner@ca.com>[CA]<http://www.ca.com/us/default.aspx>[Twitter]<http://twitter.com/CAInc>[Slideshare]<http://www.slideshare.net/cainc>[Facebook]<https://www.facebook.com/CATechnologies>[YouTube]<http://www.youtube.com/user/catechnologies>[LinkedIn]<http://www.linkedin.com/company/1372?goback=.cps_1244823420724_1>[Google]<https://plus.google.com/CATechnologies>[Google+]<http://www.ca.com/us/rss.aspx?intcmp=footernav>



  • 3.  Re: how to know who delete a obsolete computer group?

    Posted Jul 24, 2017 10:41 AM

    I believe this is already recorded in Windows event viewer, but if not look at event based policies

     

     

     

     

    Steve McCormick, ITIL

    CA Technologies

    Principal Services Consultant

    Tel: +1-731-676-4223

    Stephen.McCormick@ca.com<mailto:Stephen.McCormick@ca.com>



  • 4.  Re: how to know who delete a obsolete computer group?

    Broadcom Employee
    Posted Jul 24, 2017 01:07 PM

    Yes, an event is created E.G “%CADSM_I_1005 Common Group deleted by user winnt://itcm01sp-dm141/administrator: name=Test, classid=7, uuid=39C2973C-4E9C-45FF-97CD-CC363D81C36E”