How to search for events for accounts that match a naming convention
How to search for events for accounts that all match a certain naming convention
Open the Change Auditor client
Create a new Search
Click the What tab
Click the down arrow next to Add and select Subsytem | Active Directory
Under Scope select 'This Object'
Towards the bottom of the screen, in the field next to * Like type your wildcard string, such as *svc* to return all accounts with svc in the name or domain*svc.* to return all accounts with svc. in the name.
Note: The search uses the canonical name of the account (domain.com/OU/Username)