A
archi
I am looking for a method or tool that allow to monitor
and manage group policy - alert if any problems.
Thank you.
and manage group policy - alert if any problems.
Thank you.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
R
Robert Cohen
I don't think that exists
you can use gpresult at the command prompt to help but it wont alert
problems
you can use gpresult at the command prompt to help but it wont alert
problems
G
Gary Mudgett [MSFT]
There is not a tool that will check the ADM files. Those are not used in
the application of the policy, they are just used when the policy is
created/modified in the Administrative Templates section of the computer or
user poolicy in group policy editor.
--
--
Gary Mudgett, MCSE, MCSA
Windows 2000 Directory Services
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
the application of the policy, they are just used when the policy is
created/modified in the Administrative Templates section of the computer or
user poolicy in group policy editor.
--
--
Gary Mudgett, MCSE, MCSA
Windows 2000 Directory Services
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
[FONT="]Are you looking for a native auditing methodology, or a third-party solution? You can audit GPO changes through the native audit log, but it won’t give you a lot of filtering and reporting capabilities. There are a few good third-party tools that can be of use to you as well. I recommend evaluating Tripwire Log Management or NetWrix Group Policy Change Auditor.
[/FONT]
[/FONT]
[FONT="]We use Netwrix GP Change Reporter [/FONT][FONT="]for this. It reports on newly [/FONT]created and deleted GPOs, GPO link changes, changes made to audit policy, password policy, software deployment, etc. Another good option is Quest ChangeAuditor, which has similar functionality.