• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 315
  • Last Modified:

Event ID's for associated with Group Policy Modifications?

Can some point me in the right direction for which event ID's are related to group policy modifications in both 2003 & 2008 domains?
2 Solutions
Mike KlineCommented:
It is 566 for 2003, see this question I helped with   http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24534479.html

corresponding to 566 in 2008   http://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=566

I'd have to test later for screenshots there.


SandeshdubeySenior Server EngineerCommented:
The event id for Group Policy Changes will be logged if the Directory Service Access Success auditing is enabled in the Default Domain Controllers Policy.

Good blog on the subject here:

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now