cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1301
Views
0
Helpful
8
Replies

Audit - User Create/Delete events in TMS Provisioning Directory

dc-csa-chn
Level 1
Level 1

Hi,

We need to find the user, who has Created/Deleted a user from TMS Provisioning Directory.

Is there any logs which can get us these details.

No luck with TMS Audit logs......

8 Replies 8

Kjetil Ree
Cisco Employee
Cisco Employee

Hi,

Activities in the Legacy TMS Agent or TMS Provisioning Extension solutions aren't logged anywhere in TMS itself, so I think you're out of luck.

Regards,

Kjetil

Would you know if this is this possible with the new provisioning extension version 1.1.0.27 ? I would like to find out when and which user was movr/jabber users were created or deleted recently. Thank you.

Magnus Ohm
Cisco Employee
Cisco Employee

Hi had a case on this once as well. Luckily the guilty one confessed

Do you have a limited numbers of admin users that have access to TMS? You can restrict access to these parts of TMS by arranging the user persmissions as this will prevent things like this to happen.

There is no logging on this as kjetil is saying.

/Magnus

dc-csa-chn
Level 1
Level 1

Hi Magnus/Kjetil,

Any chances that these ID's would have been deleted automatically.

Is it AD users or manually created users that has disappeared?

/Magnus

Magnus -> They are Manual Users

Magnus Ohm
Cisco Employee
Cisco Employee

I dont see how those users could be removed automatically under normal conditions.

Did someone recently restore a tmsagent backup which might not have contained the users that are now missing?

/Magnus

Sent from Cisco Technical Support iPhone App

Alok Jaiswal
Cisco Employee
Cisco Employee

What is the TMS & VCS software version you are running??? can you confirm

Alok

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: