This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Custom search for computers added to a specific OU

Hi,

I am trying to create a search in Change Auditor, when a computer is created under a specific OU, I cannot seems to find the wildcard while creating the searches

 

What: Computer Added

Where: Ou= ...

When: last 30 days

Anyone who can help here ?

Parents
  • Hi Naveed,

    You almost have it right except for the WHERE which is just where (what DC) it occurred on. In this case, leave the WHERE criteria blank since the change could happen on any DC.

    The search criteria should look like this:

    WHEN: Last 30 days
    WHAT: Event Class -->Computer Added
    WHAT: Subsystem--> Active Directory--> OU= (scope set to "this object and all child objects)
Reply
  • Hi Naveed,

    You almost have it right except for the WHERE which is just where (what DC) it occurred on. In this case, leave the WHERE criteria blank since the change could happen on any DC.

    The search criteria should look like this:

    WHEN: Last 30 days
    WHAT: Event Class -->Computer Added
    WHAT: Subsystem--> Active Directory--> OU= (scope set to "this object and all child objects)
Children