((EventID:5136 OR EventID:5137) ObjectClass:dnsNode (ObjectDN:UWhRCA* ObjectDN:BAAAA* ObjectDN:CN=MicrosoftDNS*)) OR (EventID:4662 (AdditionalInfo:UWhRCA* AdditionalInfo:BAAAA* AdditionalInfo:CN=MicrosoftDNS*))