Active Directory and Group Policy?

Question

Can you monitor who makes changes in Active Directory and Group Policy. For ex.) Who renamed a OU or added a policy?

How do you enable logging?

Answer 1

While enabling logging will potentially tell you what you want to know, combing through the logs will drive you nuts in short order.

You can enable logging under Administrative Tools > Domain Controller Security Policy or in the Group Policy snap-in.

In all honesty, I'd strongly recommend a 3rd party solution such a GFI's EventsManager or Microsoft's MOM. Neither are all that easy to get up and running but both can be configured to send you alerts when certain pre-defined events occur.

If you are having problems with OUs being renamed or Group Policies being applied without your consent, you have too many admins on your network! I work for a Fortune 300 company and we have over 8,000 users on an AD network that spans nearly 250 sites. Only 1 person has Enterprise Admin rights on the network and we have no more than 3 people with Domain Admin access in any one of the 4 domains (one root and 3 child) and only 7 people have Domain Admin rights anywhere.

Answer 2

there is ironicly a collection coverage placing for that the place you are able to set frequency of the gang coverage replace on the community.... the definitely time that it takes to accomplish that could matter on the variety of desktops on the internet...for community community its often approximately 30 seconds from while the server sends the replace.

Answer 3

Turn logging on full and it will...