Regular Contributor

Hi all,

 

I'm trying to determine who modified the "userWorkstations" attribute of some accounts within Active Directory. (This is the attribute that stores the list of workstations that an account is allowed to sign in to, configured from the "Log on to..." link in ADAC.) Unfortunately, nothing appears to have been logged by MDI. I made a change to an account myself and checked in MDI after a while and confirmed that nothing was logged. Is this expected behavior? I see that MDI made note of changes to the "manager" attribute that I made to a couple accounts a few days ago, so I don't understand why this other change isn't being logged.

 

Thanks!

www.000webhost.com