Up until today we have had around 1300 managed devices in our domain (LDMS 8.8 SP2a).
Today that number has been reduced drastically to 439 total managed devices.
I want to ensure that there were was no "foul play" behind this - - is there a log or event record written that I can review to see who deleted these devices, or, if it was part of the automatic reconciliation?
I doubt that it was the automatic reconciliation based of the total number of devices deleted, but you never know.
Hopefully, most will come back with today's scheduled scans - - but trying to figure out what type of problem we are up against (human vs software).
Thanks in advance for your help!