report on group policy by date on Windows 2003 Server

Posted on 2011-03-01
Last Modified: 2012-06-21
Long story but I was fired and re-hired by a client.  The company that took my place made a bunch of group policy changes between 4/1/10 and 8/1/10 on the server/domain.  I have run into my 3rd instance where a policy change has caused issues with being able to administrate the network.  I am very lite on Group Policy and use it very little.

I would like to do a query on all policies created or modified between the dates but do not know how to accomplish this.  Anyone have the magic answer?
Question by:Jon Conant
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2

Expert Comment

ID: 35010271
For starters you can go into gpmc.msc and navigate to the GPO OBJECTS  container - The objects will be listed in the right window pane and a modification date will be listed.

We can then look at the setting tab and collapse (show all enabled policies) - anything look pecular.

In the meantime, I will find a more grnaualr solution

Expert Comment

ID: 35010288
I my opinion you should always backup GPOs offsite or to media as well.

GPO OBJECTS containter - right click GPO and choose backup.
If you ever needed to you can restore as well.

Accepted Solution

tl121000 earned 500 total points
ID: 35010345
Just as I expected - to get more granular and see what actual policy was changed you would need a 3rd party tool.

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!


Author Closing Comment

by:Jon Conant
ID: 35010499
Thank you.  Not the answer I wanted but helps me stop the searching and let's me go back to reverse engineering each issue where it appears that a GP change is blocking what I am trying to do.  Thank you for refering to backing the thing up.  I will do that I worry what trouble I can get into with "thinking" that I am modifying the correct policy.

Expert Comment

ID: 35010833
Thanks - did you look at the first post?  At least you can see what  and when a GPO was modified during your sabbatical :)

Author Comment

by:Jon Conant
ID: 35011419
i did and didn't see anything in particular.  There was a folder redirection for a user that showed a date that was during that time frame but nothing else.  I don't think there are many more surprises awaiting but that list would have been helpful to refer to.

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Learn about cloud computing and its benefits for small business owners.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below.…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question