in Windows, and maybe in system logs, is there a way to find if a computer have been in an Active Directory domain, even if now it is not.

Does a log message trace join or quit a domain ?


Yes, there is a log for joining a domain.
Run eventvwr.msc > Windows Logs > System. Filter Current Log by event ID 3260.
Also, when you quit a domain it means you joined a workgroup and the event ID you should filter in this case is 3261.

  • Thank you, exactly what I was looking for – iXô Jul 29 at 13:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.