Good afternoon everyone,
I work in a mid size company where there are two of us that have full domain administrative rights. My counterpart as he is refered to has no experience with network administration, no training, no certifications and likes to just jump in and see what happens by changing settings.
THe problem is I am tired of trying to figure out what has been changed, why and why wasn't I told. And, like most situations with rogue admins they claim the ole 'I didn't change anything!'.
So what I need to find is a way to lock this person out of the group policy settings and or to have a log or notification that a policy has been modified. Is there an easy way to do this without buying hardware or software?