Objectclass * is a problem. AD is constantly changing. If a computer gets added, this will trigger your job. If a group policy gets updated...
Try limiting the objectclass to only those you need (groups & users). Be aware that computers (and contacts) also have an objectclass of 'user' so they will be monitored as well. I'm not sure if you can change it to ObjectCategory=Person which would exclude them - depends on the event agent.
Peter