Active Directory Identifying changed records

  • Thread starter Thread starter Cheesebread
  • Start date Start date
C

Cheesebread

Guest
I am working on a request where we are tracking changes to a user or group's account in AD and I was using this time based filter like below where the dValue is the current time less an hour.


$"(&(objectClass=user)(ObjectCategory=person)(|(whenCreated>={dValue})(whenchanged>={dValue})))";


This doesn't seem to be working as expected. We are seeing that new users are of course being picked up but changes to other items, specifically group membership (memberOf property collection) are not being found. Is there any way to know what properties are affect when this is changed, is it tied to a specific DC and is there anything I can do to this query to get membership?


Thank you.

Continue reading...
 
Back
Top