Announcement

Collapse
No announcement yet.

Group policy change logging

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Group policy change logging

    We have a large organzation and many people adding and removing GPOs. Is there a way of tracking who made a change to a specific group policy or some sort of logging that tracks that?

  • #2
    Re: Group policy change logging

    If you have an enterprise license agreement (at least some of them), you get MDOP (Desktop Optimisation Pack) which includes "Advanced Group Policy Management" - rollback and approval of group policy

    You could also look at AD event auditing as it was extended (IIRC in 200 to cover changes to AD
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment

    Working...
    X