Have a strange issue..Computer accounts getting deleted automatically from AD. (Win 2008R2,2012 and 2012R2 DCs). I could see few events 4724 and 4742 for reset and change. Also could see 5141 event for the same computer account but its for class: dnsnode with security id system. Anyone can help me in uderstanding what this event for...? DN: shows cn-MicrosoftDNS,DC=domain,DC=com. Is this anything wrong with the DNS Server? If issue with DNS server why doesn't cause issue for all the host records.
Also, I dont see any 4743 or any other event for computer account deletion.
Need help and suggestion immediately please....
Appreciate the support provided!!