This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Search for when AD Computer Objects are moved to Computers OU

I am looking to create a search that audits when any computer object is moved in or out of the default 'Computers' OU.

I see there is a 'Computer moved' event class that I might be able to use. However, Im not sure what I would put in the 'Where the previous value contained the following text:' and 'Where the new value contains the following text:' fields. Please let me know if I am on the right track or if there is a better way to do this.

Thanks!