Event banner

What's new in Active Directory

Event Ended
Tuesday, Nov 28, 2023, 10:00 AM PST
Online

Event details

Lean in as software developers from the Active Directory software engineering team dive into the latest improvements in Active Directory. We'll cover key areas of investment including scalability, se...
Char_Cheesman
Updated Dec 27, 2024
Technical Takeoff
Nannnu's avatar
Nannnu
Copper Contributor
Nov 28, 2023
Is there any fixes planned for schema change events only going to DS schema type events like 1898 and 1899 and not creating 5136 events. Very difficult to correlate because they go into different event but also schema modification events (unlike creation) don’t even tell you what attribute was modified , example description (in the 1898 event)
Wayne_McIntyre's avatar
Wayne_McIntyre
Icon for Microsoft rankMicrosoft
Nov 28, 2023
Hi Narayanan, I just checked the code and did a quick test and 1898 event (schema modification) includes the schema object being modified. Internal event: The following schema object was modified. Schema object: CN=account,CN=Schema,CN=Configuration,DC=Contoso,DC=com
  • Nannnu's avatar
    Nannnu
    Copper Contributor
    Nov 28, 2023
    Well my bad putting it in wrong words I meant the attribute
    • Wayne_McIntyre's avatar
      Wayne_McIntyre
      Icon for Microsoft rankMicrosoft
      Nov 28, 2023
      ahh, I understand now. That is great feedback. There are no changes to these events, however you could combine knowing the object and then reviewing the metadata of the object to find which attributes have changed. I think part of the problem with the event is the number of attributes will be of variable length, so I could modify 1 attribute or 40 attributes on the same object in the same modification call. Certainly, doable though.
      • Nannnu's avatar
        Nannnu
        Copper Contributor
        Nov 28, 2023

        thanks Wayne 🙂 , appreciate it.. also taking full advantage of getting you all AD experts from MS here 🙂 , here is a fun issue too , even though assumption is that schema changes dont produce 5136 events, sometimes they do , its very intermittent and ive been able to produce about 2 events in 20 attempts.

         

        A directory service object was created.

        Subject: Security ID: NARASUB\administrator

        Account Name: Administrator

        Account Domain: NARASUB

        Logon ID: 0x1E86302

        Directory Service: Name: narasub.com

        Type: Active Directory Domain Services Object: DN: CN=gabbf,CN=Schema,CN=Configuration,DC=narasub,DC=com GUID: CN=gabbf,CN=Schema,CN=Configuration,DC=narasub,DC=com Class: attributeSchema Operation: Correlation ID: {2b0c88c4-d488-4ff1-bcca-ae3ba57361d0} Application Correlation ID: -

Date and Time
Nov 28, 202310:00 AM - 10:30 AM PST