Re: Logging OU access Event ID's

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 01/07/05

  • Next message: Steven L Umbach: "Re: Adding the Certificate Templates to the Certification Authority" 
    Date: Fri, 7 Jan 2005 11:17:32 -0600

    First enable auditing of directory services access in Domain Controller
    Security policy. Then go to the domain container in Active Directory Users
    and Computers and audit for create or delete Organizational Units objects.
    You may have already doen that and just need to enable auditing of
    directory services access. --- Steve

    "Joe Flynn" <JoeFlynn@discussions.microsoft.com> wrote in message
    news:EC9440B3-BA47-47FC-A054-3D598462F119@microsoft.com...
    > Can anyone possibly help me. I am trying to create an alert for when an
    > OU
    > gets deleted or created within Active Directory. Does anyone know what
    > evnt
    > ID's if any that gets generated when this action is taken. I am testing
    > and
    > I do not see any events showing up.

  • Next message: Steven L Umbach: "Re: Adding the Certificate Templates to the Certification Authority"