A "User Deleted" Event Class does not exist in the Event Class selector of the search properties, this is because of Active Directory objects Tombstone lifetime. The objects are not actually deleted, they are only "Removed" or hidden from Active Directory until the Tombstone Lifetime period expires. Consequently the relevant event class for this event is "User object removed".
Complete the following to create the search:
Save and run report.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책 Cookie Preference Center