Group policy monitoring

[archi]

I am looking for a method or tool that allow to monitor
and manage group policy - alert if any problems.

Thank you.

 

[Robert Cohen]

I don't think that exists

you can use gpresult at the command prompt to help but it wont alert
problems

 

[Gary Mudgett [MSFT]]

There is not a tool that will check the ADM files. Those are not used in
the application of the policy, they are just used when the policy is
created/modified in the Administrative Templates section of the computer or
user poolicy in group policy editor.

--
--
Gary Mudgett, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Churritos]

[FONT=&quot]Are you looking for a native auditing methodology, or a third-party solution? You can audit GPO changes through the native audit log, but it won’t give you a lot of filtering and reporting capabilities. There are a few good third-party tools that can be of use to you as well. I recommend evaluating Tripwire Log Management or NetWrix Group Policy Change Auditor.
[/FONT]

 

[Churritos]

[FONT=&quot]We use Netwrix GP Change Reporter [/FONT][FONT=&quot]for this. It reports on newly [/FONT]created and deleted GPOs, GPO link changes, changes made to audit policy, password policy, software deployment, etc. Another good option is Quest ChangeAuditor, which has similar functionality.