If you have set your system up to track things, the easiest way is probably to run the DSPAUDJRNE command for CP entries. Look for changes in the STATUS column. You can test by running CHGUSRPRF against a test profile to see if CP entries are created. If none are created, then your system is configured not to track those changes and no record exists. — Tom
Hi Tom, I tried to CHGUSRPRF but I do not know whether CP entries are created or not. Suggest me on this.
If you are using ADUC, try this….
ADUC has no connection to this question.
I do not know whether CP entries are created…
I don’t know either. I can’t run DSPAUDJRNE for you.
Tom I know pretty well you can’t run for me, but you can tell me where to find that …
Type it on any system command line and press the F4-key. If it isn’t found by your system, either someone has deleted it or your system is so old that it doesn’t exist for you. You haven’t said how old your system is. (What OS version are you running?) If you can’t use DSPAUDJRNE, then use DSPJRN over your QAUDJRN system audit journal. — Tom
if there’s a way try to search and get its logs you may find your answers from there.