One of the OU's in our domain was renamed today which caused issues. We would like to find out which user account made this change. I am unable to find out from search results which Event ID this would be categorised under.
There is auditing setup for all the OU's in the domain already so this should have been tracked, i just don't know which event ID to search for. Any help would be greatly appreciated.