Creating an AD user with the Base Content Pack AD operations produces unusable AD logs.
We are using the .Net Active Directory operations from the Base Content Pack included with OO version 10.70.
The Create User operation works fine, but it produces logs on the AD server that aren't auditable, and that's a huge problem as the security group won't green light any flow that doesn't comply with their audit process.
Apparently the Create User operation doesn't create the user in one single step. It creates a user with a placeholder Account Name (something that looks like a random string starting with a "$", and this produces Event ID 4720), and then on a second step updates the Account Name with the actual name for the user that was specified in the operation's input fields (with Event ID 4781).
Is this "normal" behavior for this operation? Can it be fixed in any way so it creates the user with the actual user name right away instead of using that placeholder?
This is encoded inside the operation, so I recommend to use either powershell operations, use DSADD command or script.
If you still looking to modify the behavior, I would recommend to open enhancement request. with a suffient justification,
New site: http://www.itmthoughts.com
New version of Mahmoudthoughts witten by other IT experts