?
Solved

Event ID's for associated with Group Policy Modifications?

Posted on 2011-09-07
2
Medium Priority
?
308 Views
Last Modified: 2012-05-12
Can some point me in the right direction for which event ID's are related to group policy modifications in both 2003 & 2008 domains?
0
Comment
Question by:rdabate
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 1000 total points
ID: 36497223
It is 566 for 2003, see this question I helped with   http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24534479.html

corresponding to 566 in 2008   http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=566

I'd have to test later for screenshots there.

Thanks

Mike
0
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 1000 total points
ID: 36500969
The event id for Group Policy Changes will be logged if the Directory Service Access Success auditing is enabled in the Default Domain Controllers Policy.

Good blog on the subject here:
http://blogs.msdn.com/ericfitz/archive/2005/08/04/447951.aspx





0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question