We've had a problem the last couple of days with machines logging on but not being able to map any drives, connect to the internet and not able to ping any of the servers. To cut a long story short, it seems that the router setting on a particular DHCP scope has been deleted.

I know I didn't delete it but I am curious to know how or when it went. Does anybody know if this sort of action would be logged in the event logs? I've had a look but can't find anything, or can anybody offer a suggestion as to why it might have happened in the first place.