|
|
Expert from Quest Software
      
Group: Forum Members
Last Login: 2/11/2012 12:15:37 AM
Posts: 18,
Visits: 8
|
|
Randy, your info on this event says it's written "...when the object's parent's audit policy has auditing enabled for moves of the object class involved", but I've looked at users, computers and groups audit permissions and I don't find one that says "move" or "Moved". Is auditing Create/Delete" permissions enough? if not, what do we need?
|
|
|
|
Supreme Being
      
Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237,
Visits: 0
|
|
I believe the OU only needs the Create action for the particular object type.
|
|
|
|