RE: Tracking who disabled a user
Hi ,
The activity tracking feature in GP is very limited and does not track necessarily all the changes, and AFAIK, user management in GP isn't specifically covered by it. The audit trails tools that used to be available with GP was deprecated by Microsoft and you're left to resort to ISV tools like FastPath Audit or Rockton's Auditor tools..
The user management is stored in the DYNAMICS..SY01400 table and does have a field called "LSTUSRED" which will tell you who edited last the user.. but this is by no means an audit trail, as one could simply go into a user card and either reset the password or simply change some user data. Only the last edit will be 'remembered' in the SY01400 table, along with a timestamp in the field MODIFDT which only holds the date, but no time.
I made a quick test by enabling in the Activity Tracking option the File Tracking (Administration >> Setup >> System >> Activity Tracking), and then checking the box for 'Modifications to Master Files'. I then went into the user management and added a User Class-ID to an existing user.
Went back to Activity Tracking inquiry, and guess what ? the changes were tracked down :
Hope this helps.