Hi all. I'm not sure exactly where to pose this question, but it may be security related so here goes...
Over the past few months users have been randomly getting a notification that files are locked by a domain account named "jsmith". At one time JSmith was a domain admin, but he hasn't worked here for 18 months, and I actually deleted his AD account entirely a couple months ago. To add to this, the files were all createdafter JSmith left the company.
Is this a possible security breach, or is there something else going on?
Any help would be appreciated!