Answered WQL - AD Sites and services

  • Friday, February 08, 2013 7:05 AM
     
     
    Hi,

    I want monitor creation of new Site in Active Directory (AD) with Wbemtest notification query. Namespace root\directory\ldap. My query is:

    select * from __InstanceOperationEvent WITHIN 20 where TargetInstance ISA "ds_site" and __class = "__InstanceCreationEvent"

    No events are monitored when creating new Site. Is my query ok?

    Tomas

All Replies

  • Friday, February 08, 2013 7:28 AM
     
     Answered

    I do not believe the ldap provider is evented for site creation.

    In WS2008 and later auditing can create an event log entry which can be tasked.


    ¯\_(ツ)_/¯