Active Directory GPO Tracking

Posted on 2004-03-25
Last Modified: 2012-06-21
I am going to 'assume' this is an easily answered question...  Its just something thats kinda hard to phrase in google in order to find the right link.

Basically all I want to do is a Domain Wide query for general OR specific things, and I want it to come back in _ONE_ report, like say I want to see which machines are getting XYZ Software Installation GPO, and I want it to query the Domain and report back the computers that have it applied successfully and those that dont.

How the heck do I manage this one, I have breezed through RSOP a few times and over and around GPMC but with GPMC I could only do 1 computer at a time, so not cool.  I am assuming MS has this built in somewhere?

Question by:joedboswell
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
LVL 16

Expert Comment

ID: 10685099

Err, MS hasn't built this in, sorry!

Installations do return success codes but the GPO engine doesn't do anything with them :(

If you are looking for good GPO reporting you can try FAZAM (a cut down version is in the W2k resource kit) or Quest ActiveRoles. If you want software metering then you will have to look at something like Microsoft SMS2003.



Expert Comment

ID: 10686653
You can do not only 1 account at one time, in fact you can speficy entire OU in your query or the whole domain. But this will get you the results for the computers located in that OU only.

Author Comment

ID: 10689285
Ugrum, How?

James, I am not really looking for whether the program itself reports as being installed successfully, I am looking to see if the GPO was applied successfully, since if it was applied, chances are its installed.  Error reporting from the installation level will come later.

I am also planning on implementing SMS2003 however that is a few months away and I need something to monitor GPO installations now.


Expert Comment

ID: 10701628
Well, when you select user and computer accounts for GPO Modelling, you can select either specific account, or an OU. If you select an OU, you get results for all user (or computer) accounts located in that OU.
LVL 16

Accepted Solution

JamesDS earned 250 total points
ID: 10701782

I believe that the only place you will see such a confirmation is in the event log of the target machine, at the point the GPO was applied.



Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Learn about cloud computing and its benefits for small business owners.
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question