Solved

aduc reports misc (domain policy last amended)

Posted on 2011-09-08
7
376 Views
Last Modified: 2012-05-12
I am trying to use ad users and comptuers to get a full list of servers in a domain, a full list of workstations in a domain, and also identify when the default domain password policy was last changed - any idea on these 3? By last changed I mean it recently became policy for domain passwords to have the complex (3/4 character sets represented). But we have loads of accounts that were setup to not expire, and I think most were setup before the domain password policy was changed

0
Comment
Question by:pma111
  • 4
  • 3
7 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
Comment Utility
If you do a find in ADUC you can search for operating system there, you could also do it via an LDAP query.

There is a nice free GUI tool called adinfo that makes that easier   http://www.cjwdev.co.uk/Software/ADReportingTool/Info.html

Screenshot of the tool attached

In GPMC you can look at the modified date for the GPO.  That however just means the GPO was modified.  If there are other settings in the GPO they could have been changed.  To get more granular on what setting exactly was modified you would need to enable auditing and use a tool like AGPM or other third party tool.

More on group policy auditing here (question I helped with)   http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_24534479.html


Thanks

Mike

adinfo-computer-version.jpg
GPMC-modified.jpg
0
 
LVL 3

Author Comment

by:pma111
Comment Utility
so in advanced tab if I just chose field and "windows server" in starts as that will list every server?

Cheers
0
 
LVL 57

Expert Comment

by:Mike Kline
Comment Utility
The field for that would be operating system.

Thanks

Mike
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 3

Author Comment

by:pma111
Comment Utility
I assume you cant see scheduled tasks per device in aduc?
Is there any remote tool to see scheduled tasks setup on a remote server?
Or do you know any tool that can? I couldnt see them in computer management console either.
0
 
LVL 57

Expert Comment

by:Mike Kline
Comment Utility
No not in ADUC, not sure about a remote tool, you can connect to the remote box   http://social.technet.microsoft.com/Forums/en/w7itproui/thread/b1e4edd1-c155-4e17-9056-c13e693c4a5a

you may want to open a separate question about that to get new eyes on it.

Thanks

Mike
0
 
LVL 3

Author Comment

by:pma111
Comment Utility
0
 
LVL 3

Author Comment

by:pma111
Comment Utility
That link seems for windows 7 - we are still on XP
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

I know all systems administrator at some time or another has had to create a script to copy file from a server share to a desktop. Well now there is an easy way to do this in Group Policy. Using Group policy preferences is not hard. The first thing …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now