Has anyone had any success with monitoring or triggering on the modification of their own AD account? I'm having difficulties because the way LEM handles event 4728 it separates the Source Account into 2 different fields Account and Domain (for example SourceAccount: Rfletcher SourceDomain: Contoso). If this value was saved as Contoso\rfletcher, then i know i would be able to trigger on that and the memberID field but nothing is lining up. Does anyone have any idea's?
↧