My aim is to find user who gives Replicating Directory Changes, Replicating Directory Changes All, Replicating Directory Changes In Filtered Set permissions to another user. I want to log an event in which I can see user who gives permissions, these permissions names and user to whom these permissions have been given.
When I give these permissions in the Event Viewer there is only one event generated.
As you see in the event I can not see username to whom permissions have been given and the name of the permissions given. Because of that I can not determine whether this event is related Replicating Directory Changes permissions or not, by just looking for in Event Viewer. Can anyone help me to solve this problem?