How to figuring out what was changed with an AD object

PowerShell Help
1

I searched the AD today with PS. And I found 5 AD objects were modified/changed this week.
Auditing is enabled but don’t know how to find what changed, which attributes / properties?
Searched the web trying to find any useful scripts, but mostly to find when was the last time an ad object was modified / created. but nothing about what was the actual change. Wondering if anyone can help.
Thanks guys

2

I think this is one of those “Use the right tools for the job” sort of things.

3

we use Change Auditor,

4

Ashley McGlone did a MVA on this a while back. https://blogs.technet.microsoft.com/ashleymcglone/2014/10/29/microsoft-virtual-academy-using-powershell-for-active-directory/

You may find it of some help.

5

Thanks guys

6

Here are another informative articles for your reference.

https://blogs.technet.microsoft.com/askpfeplat/2012/03/05/how-to-track-the-who-what-when-and-where-of-active-directory-attribute-changes-part-i-the-case-of-the-mysteriously-modified-upn/