What user or process deleted an item from the console?

Products

• IT Management Suite

Issue/Introduction

Occasionally we need to find what user or process deleted an item from the console.  Here are some suggestions.

Resolution

A couple of places to look:

select * from Evt_NS_Item_Management m
where m.ItemName = '<computer or other object>'

select * from ItemDeleted d
where d.ItemName = '<computer or other object>'