Solved

Event ID's for associated with Group Policy Modifications?

Posted on 2011-09-07
2
298 Views
Last Modified: 2012-05-12
Can some point me in the right direction for which event ID's are related to group policy modifications in both 2003 & 2008 domains?
0
Comment
Question by:rdabate
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 250 total points
Comment Utility
It is 566 for 2003, see this question I helped with   http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24534479.html

corresponding to 566 in 2008   http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=566

I'd have to test later for screenshots there.

Thanks

Mike
0
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 250 total points
Comment Utility
The event id for Group Policy Changes will be logged if the Directory Service Access Success auditing is enabled in the Default Domain Controllers Policy.

Good blog on the subject here:
http://blogs.msdn.com/ericfitz/archive/2005/08/04/447951.aspx





0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now