Event ID 5169: A directory service object was modified.
|Description||This event documents modifications to AD objects, identifying the object, user, attribute modified, the new value of the attribute if applicable and the operation performed.|
|Subcategory||Directory service changes|
This event logs the following information:
ADAudit Plus helps in tracking deletion of directory service objects, besides security principals, such as OU, GPO, container, contact, DNS node etc.
Event 5169 applies to the following operating systems:
- Windows Server 2016 and 10