| KB ID: | 10032 |
| Last Revision: | November 26, 2006 |
| Version: | 1.0 |
Search: Search events by type of object edited.
An event can also be defined by the type of object modified. For example when a group policy object gets edited, the type of object that is modified is "groupPolicyContainer". Searching by the type of object edited is a powerful way to search for unique events in your domain.
PREREQUISITES
The type of object modified.
ESTIMATED QUERY TIME
<1 second.
METHOD 1 (Advanced Search)
1. Select the Object Type from the drop down menu and click Submit.
LIKELY SCENARIOS IT APPLIES TO
- You want to find all the events when one type of object got modified.
- You want to find all the events when computers got joined to a domain.
- You want to find the events when the schema was modified.
FINE TUNE YOUR SEARCH
If you know the time scope, domain of the edited objects, or want to restrict your searches to users in a specific domain you can fine tune your search.