Solved

report on group policy by date on Windows 2003 Server

Posted on 2011-03-01
6
485 Views
Last Modified: 2012-06-21
Long story but I was fired and re-hired by a client.  The company that took my place made a bunch of group policy changes between 4/1/10 and 8/1/10 on the server/domain.  I have run into my 3rd instance where a policy change has caused issues with being able to administrate the network.  I am very lite on Group Policy and use it very little.

I would like to do a query on all policies created or modified between the dates but do not know how to accomplish this.  Anyone have the magic answer?
0
Comment
Question by:Jon Conant
  • 4
  • 2
6 Comments
 
LVL 9

Expert Comment

by:tl121000
Comment Utility
For starters you can go into gpmc.msc and navigate to the GPO OBJECTS  container - The objects will be listed in the right window pane and a modification date will be listed.

We can then look at the setting tab and collapse (show all enabled policies) - anything look pecular.

In the meantime, I will find a more grnaualr solution
0
 
LVL 9

Expert Comment

by:tl121000
Comment Utility
I my opinion you should always backup GPOs offsite or to media as well.

GPO OBJECTS containter - right click GPO and choose backup.
If you ever needed to you can restore as well.
0
 
LVL 9

Accepted Solution

by:
tl121000 earned 500 total points
Comment Utility
Just as I expected - to get more granular and see what actual policy was changed you would need a 3rd party tool.


0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 1

Author Closing Comment

by:Jon Conant
Comment Utility
Thank you.  Not the answer I wanted but helps me stop the searching and let's me go back to reverse engineering each issue where it appears that a GP change is blocking what I am trying to do.  Thank you for refering to backing the thing up.  I will do that I worry what trouble I can get into with "thinking" that I am modifying the correct policy.
0
 
LVL 9

Expert Comment

by:tl121000
Comment Utility
Thanks - did you look at the first post?  At least you can see what  and when a GPO was modified during your sabbatical :)
0
 
LVL 1

Author Comment

by:Jon Conant
Comment Utility
i did and didn't see anything in particular.  There was a folder redirection for a user that showed a date that was during that time frame but nothing else.  I don't think there are many more surprises awaiting but that list would have been helpful to refer to.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
This video discusses moving either the default database or any database to a new volume.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now