Auditing Group Policy Changes
Can anyone tell me a way we can natively audit all group policy changes that are done in Windows Server 2003 AD? Thanks for any information in advance.
Check this article:
There is no full logging builtin. Maybe you can find also some 3rdparty tools,
check Quest and NetPro.
Also have a look on 2008's new Auditing options:
You can only use the native Active Directory auditing which may flood your security event log. If you're Software Assurance customer, "Advanced Group Policy Management (AGPM)" is something you should look at. It has a built-in version control and a vault for GPs.
Re: Auditing Group Policy Changes
Is there a reason you need to natively audit them? I only ask because the native audit logs donít require the filtering capabilities necessary to audit specific events. If you can use a freeware product, I recommend that you download a tool like netwrix group policy change reporter, which will report on GP changes via E-mail.
|Thread Tools||Search this Thread|
|Similar Threads for: "Auditing Group Policy Changes"|
|Thread||Thread Starter||Forum||Replies||Last Post|
|Override the local Group Policy by domain policy or delete the RSOP||TheTurner||Windows Security||1||01-11-2012 02:13 PM|
|Using local group policy to override domain group policy||Nickason||Active Directory||3||28-09-2011 05:20 AM|
|Windows Server 2003 Auditing for account or group creation priveleges||M.Scarlet||Window 2000 Help||1||22-05-2011 05:50 AM|
|How to use Group Policy Editor to Manage Local Computer Policy on Windows XP||Afznotermi||Networking & Security||3||07-10-2009 03:12 PM|
|Group Policy -> Missing Group Policy settings||Jeroen||Active Directory||3||25-07-2007 12:00 AM|