| Event Id | 5141 | | Source | Microsoft-Windows-Security-Auditing | | Description | A directory service object was deleted.
Subject:
Security ID:<Security ID>
Account Name:<Account Name>
Account Domain:<Domain name>
Logon ID: <Logon ID>
Directory Service:
Name: <Name>
Type: < Service Type>
Object:
DN: <DN>
GUID: <GUID>
Class: <Class>
Operation:
Tree Delete:<Tree Delete>
Correlation ID:<Correlation ID>
Application Correlation ID:<Application Correlation ID>
| | Event Information | Cause :
This event will only be logged when a an object was deleted.Objects include users, computers, Organizational Units, shared folders, group and group policy.
Resolution:
This is an information evnt and no user action is required. | | Reference Links | |
|
|
