Return
-
Title
Deletion of OU in Active Directory does not show events for the deletion of the Objects that were in the OU -
Description
When an Active Directory Organizational Unit (OU) is deleted in on a Windows 2012 Domain Controller and the "Delete Subtree" option is selected, there are no events generated for the objects that were deleted within that OU. The only event recorded is that of the deleted OU: "Subordinate OU Removed".If an Active Directory Organizational Unit (OU) is deleted in and the "delete Subtree" option is selected on a Windows 2008 Domain Controller, delete events are recorded for the User and Computer objects that were contained in that OU. -
Cause
There is a difference in the Delete Subtree LDAP control implementation between Windows 2008 and Windows 2012 Domain Controllers servers. Windows 2012 servers do not generate events for child objects. -
Resolution
WORKAROUND
None
STATUS
Enhancement request number TF00587117 has been submitted to Development for consideration in a future release of Change Auditor.