Force the group policy update → In 'Group Policy Management' → Right-click the defined OU → Click on 'Group Policy Update'.Ĥ. Link the new GPO to OU with User Accounts → Go to 'Group Policy Management' → Right-click the defined OU → Choose 'Link an Existing GPO' → Choose the GPO that you’ve created. Go to Event Log → Define: Maximum security log size to 4GB Retention method for security log to Overwrite events as needed.ģ. Run gpedit.msc → Create a new GPO → Edit it → Go to 'Computer Configuration' → Policies → Windows Settings → Security Settings → Local Policies > Audit Policy: Audit account management → Define → Success.Ģ. Those who are already logged in might experience problems … 1. How to detect who disabled a user account in ActiveĨ hours ago Users whose accounts have been disabled, either accidentally or maliciously, are unable to log into IT systems using Windows authentication.
