Event ID 5137
A directory service object was createdA directory service object was created.
Subject:
Security ID: %3
Account Name: %4
Account Domain: %5
Logon ID: %6
Directory Service:
Name: %7
Type: %8
Object:
DN: %9
GUID: %10
Class: %11
Operation:
Correlation ID: %1
Application Correlation ID: %2
Auditing:
Conditional
Recommended if object-level auditing of Active Directory is required.
Generates every time an Active Directory object is created.
Microsoft Documentation
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Directory Service Changes"
LEFT/RIGHT arrow keys for navigation
Back to List