Devices were originally configured to move to associated OGs based on their AD group membership...

The console page that would confirm a potential configuration change is Monitor > Reports & Analytics > Events > Console Events. This page allows the administrator to view and filter the events that occurred in the Workspace ONE UEM console, such as configuration changes, user actions, system errors, and so on. The administrator can use this page to find out if a configuration was enabled by mistake that caused the error.