HiCould some one please advise if there is a way of tracking who deleted an user account in active directory

HiFilter you security log in the event viewr to the followingEvent ID : 630 Target Account Name: deleted user Caller User Name : the one whom deleted the accounthope this help you Regards A.Karam

Hello,in addition to Abdel fatah Karam's information you have enable auditing for account management on a GPO on the domain controllers OU, other wise nothing will be logged on the DCs event viewers. Also you have to control ALL DCs to find it. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.