Solved

Active Directory - determine who created a GPO

Posted on 2014-03-19
5
1,572 Views
Last Modified: 2014-05-20
Is it possible to determine which username created a GPO?

On the Details tab, I see the Owner, but it is "Domain Admins".  I'd like to know which specific username created a GPO.
0
Comment
Question by:snowdog_2112
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 39940351
0
 

Author Comment

by:snowdog_2112
ID: 39950217
I need to determine who created a GPO which already exists.

The issue is, a GPO has caused operational side-effects, so I need to know who created it to make sure they are aware of their mistake.

Any options?
0
 

Accepted Solution

by:
snowdog_2112 earned 0 total points
ID: 40030898
Again - this is after the fact.  NO way to tell the user who modified a policy?
0
 

Author Closing Comment

by:snowdog_2112
ID: 40077102
Apparently, unless auditing is already in place, there is not a mechanism to determine the user who changed a GPO.  Even if auditing is enabled, a concern would be the age of the change - for example, if the change ages and the security logs are rolled or overwritten.
0

Featured Post

SharePoint Admin?

Enable Your Employees To Focus On The Core With Intuitive Onscreen Guidance That is With You At The Moment of Need.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question