Solved

aduc reports misc (domain policy last amended)

Posted on 2011-09-08
7
379 Views
Last Modified: 2012-05-12
I am trying to use ad users and comptuers to get a full list of servers in a domain, a full list of workstations in a domain, and also identify when the default domain password policy was last changed - any idea on these 3? By last changed I mean it recently became policy for domain passwords to have the complex (3/4 character sets represented). But we have loads of accounts that were setup to not expire, and I think most were setup before the domain password policy was changed

0
Comment
Question by:pma111
  • 4
  • 3
7 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36502955
If you do a find in ADUC you can search for operating system there, you could also do it via an LDAP query.

There is a nice free GUI tool called adinfo that makes that easier   http://www.cjwdev.co.uk/Software/ADReportingTool/Info.html

Screenshot of the tool attached

In GPMC you can look at the modified date for the GPO.  That however just means the GPO was modified.  If there are other settings in the GPO they could have been changed.  To get more granular on what setting exactly was modified you would need to enable auditing and use a tool like AGPM or other third party tool.

More on group policy auditing here (question I helped with)   http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24534479.html


Thanks

Mike

adinfo-computer-version.jpg
GPMC-modified.jpg
0
 
LVL 3

Author Comment

by:pma111
ID: 36503016
so in advanced tab if I just chose field and "windows server" in starts as that will list every server?

Cheers
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36503106
The field for that would be operating system.

Thanks

Mike
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 3

Author Comment

by:pma111
ID: 36503146
I assume you cant see scheduled tasks per device in aduc?
Is there any remote tool to see scheduled tasks setup on a remote server?
Or do you know any tool that can? I couldnt see them in computer management console either.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 36503216
No not in ADUC, not sure about a remote tool, you can connect to the remote box   http://social.technet.microsoft.com/Forums/en/w7itproui/thread/b1e4edd1-c155-4e17-9056-c13e693c4a5a

you may want to open a separate question about that to get new eyes on it.

Thanks

Mike
0
 
LVL 3

Author Comment

by:pma111
ID: 36503277
0
 
LVL 3

Author Comment

by:pma111
ID: 36503312
That link seems for windows 7 - we are still on XP
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now