There is not a tool that will check the ADM files. Those are not used in
the application of the policy, they are just used when the policy is
created/modified in the Administrative Templates section of the computer or
user poolicy in group policy editor.
Gary Mudgett, MCSE, MCSA
Windows 2000 Directory Services
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
This posting is provided "AS IS" with no warranties, and confers no rights.
[FONT="]Are you looking for a native auditing methodology, or a third-party solution? You can audit GPO changes through the native audit log, but it won’t give you a lot of filtering and reporting capabilities. There are a few good third-party tools that can be of use to you as well. I recommend evaluating Tripwire Log Management or NetWrix Group Policy Change Auditor.
[FONT="]We use Netwrix GP Change Reporter [/FONT][FONT="]for this. It reports on newly [/FONT]created and deleted GPOs, GPO link changes, changes made to audit policy, password policy, software deployment, etc. Another good option is Quest ChangeAuditor, which has similar functionality.
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.