Logs

[Adrian Marsh]

Does GPO "replication" on the client get logged anywhere?

For some reason, the SUS settings on my DNS/DHCP server aren't being applied
by the Domain, but the other servers in the same OU are. Any way I can
check whats happening when a client 'downloads' the GPO ?

A.

 

[Brian Desmond [MVP]]

Adrian-

Two places to check - %windir%\security\logs\winlogon.log, and the gpresult
utility on the client workstation.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[Darren Mar-Elia]

Best place to check is userenv.log. You can enable it by checking out the
following KB article
(http://support.microsoft.com/default.aspx?scid=kb;en-us;221833) or download
my GPO logging .ADM template at www.gpoguy.com/tools.htm

winlogon.log is specific to security policy processing and won't show Admin.
Template policy. Gpresult is a good choice too--as that will tell you what
the machine thinks its supposed to get or is getting.

--
Darren Mar-Elia
MS-MVP-Windows Management
http://www.gpoguy.com

 

[Adrian Marsh]

never mind, I had the .exe file in the wrong place....