title: Active Directory whenChanged attribute
body: <p>I'm trying to find out incremental changes with the novell c# ldap library and saw that active directory has an attribute "whenChanged" in each object which timestamps when the object has changed last. My issue is, that it doesn't seem to change when I delete a user from a group or a group from a organization.</p>
  
  <p>Is there a way to see these changes(added user, deleted user, added group, deleted group) on group and OU basis?</p>