moving OU



Can you tell me the event ID or how to track who might
have moved an OU in the Active Directory structure?

thank you.



David Brandt [MSFT]

You can enable auditing to try and track that, but unless it was already
enabled prior to the move, it won't be possible to determine that post fact.
While I haven't tested it, I would suggest auditing for directory services
access and object acccess in your gpo, and then on the OU you're wanting to
follow as well (properties of OU/security/advanced/audit tab)

David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question