Question : Who renamed my OU

I have auditing turned on in the Active Directory environment,

An administrator renamed a very important OU, I would like to find out how to identify who renamed an OU, what time/date etc.

What event ID should i look for in the security log ?

Is there an easier method to report the changes that have been made daily in the Active Directory environment ?

Answer : Who renamed my OU

This tool is great! http://www.scriptlogic.com/Active_Directory_Auditing.asp

If that is not an option, organize everyone who may have the right to perform such actions.  Members of the Enterprise/Domain administrators group, Account Operators, etc.

List of Security Events: http://support.microsoft.com/kb/299475/
Random Solutions  
 
programming4us programming4us