Event ID 566: Object Operation (W3 Active Directory).
|Description||This event logs the permissions actually exercised by the user/program after opening the object in event 565|
This event logs the following information:
This event is similar to 567 but is limited to Active Directory object accesses.
ADAudit Plus logs this event since it keeps track of every directory service object access. Eg. OU, GPO, container, contact and other object types besides security principals.
Event 565 applies to the following operating systems:
- Windows Server 2003 and XP