Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1042
  • Last Modified:

Active Directory GPO Tracking

I am going to 'assume' this is an easily answered question...  Its just something thats kinda hard to phrase in google in order to find the right link.

Basically all I want to do is a Domain Wide query for general OR specific things, and I want it to come back in _ONE_ report, like say I want to see which machines are getting XYZ Software Installation GPO, and I want it to query the Domain and report back the computers that have it applied successfully and those that dont.

How the heck do I manage this one, I have breezed through RSOP a few times and over and around GPMC but with GPMC I could only do 1 computer at a time, so not cool.  I am assuming MS has this built in somewhere?

Joe
0
joedboswell
Asked:
joedboswell
  • 2
  • 2
1 Solution
 
JamesDSCommented:
Joe

Err, MS hasn't built this in, sorry!

Installations do return success codes but the GPO engine doesn't do anything with them :(

If you are looking for good GPO reporting you can try FAZAM (a cut down version is in the W2k resource kit) or Quest ActiveRoles. If you want software metering then you will have to look at something like Microsoft SMS2003.

Cheers

JamesDS
0
 
UgrumCommented:
You can do not only 1 account at one time, in fact you can speficy entire OU in your query or the whole domain. But this will get you the results for the computers located in that OU only.
0
 
joedboswellAuthor Commented:
Ugrum, How?

James, I am not really looking for whether the program itself reports as being installed successfully, I am looking to see if the GPO was applied successfully, since if it was applied, chances are its installed.  Error reporting from the installation level will come later.

I am also planning on implementing SMS2003 however that is a few months away and I need something to monitor GPO installations now.

Joe
0
 
UgrumCommented:
Well, when you select user and computer accounts for GPO Modelling, you can select either specific account, or an OU. If you select an OU, you get results for all user (or computer) accounts located in that OU.
0
 
JamesDSCommented:
Joe

I believe that the only place you will see such a confirmation is in the event log of the target machine, at the point the GPO was applied.

Cheers

James
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now