We are trying to find who is adding a specific user to our BES. I have run the adminhistory.exe provided by the resource toolkit but only finding the .csv output is showing the service account we have set up for the BES in the SecDisplayName results. Does anyone know of another method for auditing who could be adding a user to the BES? We're running 5.0 SP1 and BAS logs were set to debug mode prior to the user addition. Thanks!

Update: I found a similar situation in the BlackBerry forums but no response there either....ideas?

http://supportforums.blackberry.com/...p/462987#M3514