Event ID for modified GPOs Expand / Collapse
Author
Message
Posted 2/22/2010 4:16:19 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 2/22/2010 9:59:30 AM
Posts: 1, Visits: 5
I have to know, who (usersid or loginname) changed a specified GPO for a specified OU in the Active Directory. Given our audit settings include this, what would be the right Event ID to look for?
Post #315
Posted 2/22/2010 9:07:51 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 326, Visits: 0
There is no specific event ID but you can accomplish it using Directory Access.  I show how in this free webinar: Top 10 Active Directory Changes to Monitor in the Security Log
Post #316
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:16am