moving OU

  • Thread starter Thread starter AJ
  • Start date Start date
A

AJ

Can you tell me the event ID or how to track who might
have moved an OU in the Active Directory structure?

thank you.
 
You can enable auditing to try and track that, but unless it was already
enabled prior to the move, it won't be possible to determine that post fact.
While I haven't tested it, I would suggest auditing for directory services
access and object acccess in your gpo, and then on the OU you're wanting to
follow as well (properties of OU/security/advanced/audit tab)

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
Back
Top