DCPromo: Determine when a member server was promoted

Concern: Is there an event ID or something that gets logged that shows when dcpromo was run on a server? I am trying to figure out when a server was promoted to a domain controller.

To determine when the member server was promoted:
dsquery * "cn=Sites,cn=Configuration,dc=domain,dc=com" `
-Filter "(cn=NTDS Settings)" `
-attr distinguishedName whenCreated
Audit the DCPROMO.LOG and DCPROMOUI.LOG found within the "C:\Windows\Debug" directory.

No comments:

Post a Comment