What is the behavior of the domain watch when an AD Object moves around in AD?
For example, I have a policy set to only query the Computers container, and a specific OU at the root of AD.
Naturally, I had a ton of computers in the Computers Containter that got templates created for them due to the domain watch, but they'll never check in because they don't really exist anymore.
Being an MSP we inherit a lot of clients whose AD has never had any housekeeping. So, I created a script that creates some house cleaning OU's and moves inactive computers into them.
I did this for a client , but DOmain Watch still has templates for these computers even though they're no longer in a contain or ou that's watched by the domain watch feature. Synchronization occurs ever 60 seconds and full sync occurs once a week.
What's your thoughts?