Auditing GPOs

[Rajesh_rana]

Hi,

We got an Active Directory setup and running OK. There are only 3 people who
are managing GPOs through membership of Domain Admin group. We need to add
some junior administrators into Domain Admin group but would like to know if
there is an easy way to monitor/audit changes made to GPOs by anyone in the
Domain Admin group.

Any ideas how to efficiently audit changes to GPOs.

Thanks in Advance.

RR

 

[Rob Schaub]

Rajesh,

You can go into the properties of the policy and set the
security to only allow the 3 GPO admins access to create,
delete, and write to these policies. Remove the others for
these options.