We have an OU in Windows Active Directory specifically for disabled user objects, with sub-OUs for different departments. For example, the base OU is OU=Disabled Users,DC=domain,DC=com, with child OUs of OU=Department,OU=Disabled Users,DC=domain,DC=com.
Is there a way to alert on a user object in the base or child OUs when it's enabled? The Event types "UserEnable" and "Auditable User Events" don't show an OU for the user object, and no search for that base OU shows specifically for a User Enable event.