can't recieve isDeleted=True when delete user account in AD.

[sundukevi4]

There are no any events with admonEventType=Update and isDeleted=TRUE when i delete user account, or OU from Active directory. Events with id 630 takes place in Security journal. Where could be the problem?

[stuartg_orion]

The Deleted Objects container is on the root of your active directory tree. If the starting node of for your Active Directory monitor input is not the root you won't be monitoring this container.

So to fix the problem change your starting node to be the root of your domain.