script file missing

[majorkuso]

what can I use to determine why a logon vbs script was removed from the policy folder. I had to restore the file from a backup then it was replicated to our other DCs. So far our AV hasn't shown anything so I doubt that removed it as it has been on there until last night/yesterday. event viewer doesn't show any 4663 or 4660 that I can see. the DCs are 2012 r2

Continue reading...