Announcement

Collapse
No announcement yet.

Active Directory & Group Policy Changes reporting Tool

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Active Directory & Group Policy Changes reporting Tool

    Hi,

    Is there a method, procedure, tool to start the reporting of changes made to active directory and group policy.
    Need to who what and when the changes were made.
    There are a lot of freeware programs but they all have limitations.
    Does Microsoft have its own procedure to do the same for free.

    Thanks
    Menino

  • #2
    Re: Active Directory & Group Policy Changes reporting Tool

    Originally posted by meninoferns View Post
    Hi,

    Is there a method, procedure, tool to start the reporting of changes made to active directory and group policy.
    Need to who what and when the changes were made.
    There are a lot of freeware programs but they all have limitations.
    Does Microsoft have its own procedure to do the same for free.

    Thanks
    Menino
    Microsoft can audit this for you, so the event viewer can be used to look at the changes.

    http://support.microsoft.com/kb/314955

    It is the same for w2k and w2k3.

    You need to make sure that you limit the rights regarding clearing the event viewer or archive in some way.

    Comment


    • #3
      Re: Active Directory & Group Policy Changes reporting Tool

      NetPro

      Full reporting and alerting capabilities, a really excellent product. A high price, but worth every penny. It also has the ability to recover deleted AD objects.


      Tom
      For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

      Anything you say will be misquoted and used against you

      Comment


      • #4
        Re: Active Directory & Group Policy Changes reporting Tool

        hi virtual

        I have around 5 domain controllers . If i want to track one activity that means that we have to check all the logs on all the controllers.

        Is there any ideas that will ease the pain.

        Netpro, Netwrix Quest all are expensive.

        Thanks & Regards
        Menino

        Comment


        • #5
          Re: Active Directory & Group Policy Changes reporting Tool

          You could use EventCombMT to sift through the events or
          Eventtrigger.exe to get e-mail notification for certain events logged.

          Cheers
          Caesar's cipher - 3

          ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

          SFX JNRS FC U6 MNGR

          Comment


          • #6
            Re: Active Directory & Group Policy Changes reporting Tool

            In a w2k8 domain you can have events forwarded into one location to make it easier.

            A convenient way for you is to create a custom MMC and then add the event viewers of all DCs in there and/or other servers as well. That saves you logging onto multiple DCs.

            Apologies if you already know how to, but go to Start, Run. Type MMC.

            File, Add/Remove Snap-In, Choose the event viewer and pick the local/remote location as appropriate.

            I do that in all the domains we manage and saves a lot of time and almost makes it a pleasurable experience for the staff to review them on a dialy basis, well, more bearable anyway.

            Comment


            • #7
              Re: Active Directory & Group Policy Changes reporting Tool

              I agree with virtual here. You should upgrade to windows 2008 domain. Then you'll unlock some new features like auditing DS access and changes. To monitor several servers you can configure a collector to gather these auditing events.

              regards
              bio..

              Comment


              • #8
                Re: Active Directory & Group Policy Changes reporting Tool

                Free and powerful solution.. use Microsoft's Log Parser tool, install it on the domain controllers or whatever servers you want to look at.

                Write a vbscript to gather specific events gathered from the log parser.

                Google vbscripts with Microsoft Log Parser.

                If stuck, maybe I can send some code your way.

                Here is the download link: http://www.microsoft.com/downloads/d...displaylang=en
                And here is M$'s examples:
                http://www.microsoft.com/technet/scr...pexamples.mspx
                Last edited by Parkham; 15th May 2009, 19:42.

                Comment


                • #9
                  Re: Active Directory & Group Policy Changes reporting Tool

                  Cool solution

                  Comment

                  Working...
                  X