Task scheduler Event trigger on user mail field change
How I could trigger Task Scheduler event when user mail field changed (or any custom attribute) in Active Directory? We want to run Powershell script when user mail field changes. Event ID: 4738, doesn't trigger when mail changed.
Event Id 4738 is logged for attributes that are documented for that event. If you want to use other attributes, you need to use Event Id 5136 (Directory Service Changes).
https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4738