Suppose an old administrator left the organization. He left no documentation, and had many things set up "his way", while ignoring best practice.
I want to delete his account, though this will likely break many valid services (this is how he had it set up).
How would I search the network (or AD) to locate any services running under a particular user account?
Must I log into each server and check its services?
Best Answer
You can review the security log on your Domain Controllers after he's gone and his account should no longer be in active use. Look for successful account logons for his account and what machine(s) they're coming from.