Hello,
I am trying to monitor changes to AD users, but I can't seem to find the event ID that generates when a change to User's job title/manager is made. If anyone knows which event ID monitors this, please share.
I have tested 4738 and several others but they don't seem to generate any events even after enabling the audit policies that are user account related.
Thanks