Today, we have a scheduled task to monitor group memberships in AD. We would like ARM to do this, but at a domain level, it will only do it for actions take in ARM, not in AD itself. (Direct and indirect) In ARM, we can create alerts for security and distribution groups (Direct and indirect), but not for organization units. For the OU's, it will only alert on direct changes in ARM. Is there a way around this? In the screen shot attached, the option is not allowed.
