Resolution
fix
When an object is moved between Windows 2000 organizational units (OUs), a security event (ID 565) is generated and written to the security log. Operations Manager and Security Manager can collect these events. However, neither system currently alerts on these events out-of-the-box.
When an object is moved between Windows 2000 organizational units (OUs), a security event (ID 565) is generated and written to the security log. Operations Manager and Security Manager can collect these events. However, neither system currently alerts on these events out-of-the-box.
It is easy to create custom rules in both programs using the 565 event parameters to add this functionality. Refer to the online help of both products to get the details on creating custom rules.
Additional Information
Formerly known as NETIQKB1137