?
Solved

Active Directory - determine who created a GPO

Posted on 2014-03-19
5
Medium Priority
?
1,753 Views
Last Modified: 2014-05-20
Is it possible to determine which username created a GPO?

On the Details tab, I see the Owner, but it is "Domain Admins".  I'd like to know which specific username created a GPO.
0
Comment
Question by:snowdog_2112
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
5 Comments
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 39940351
0
 

Author Comment

by:snowdog_2112
ID: 39950217
I need to determine who created a GPO which already exists.

The issue is, a GPO has caused operational side-effects, so I need to know who created it to make sure they are aware of their mistake.

Any options?
0
 

Accepted Solution

by:
snowdog_2112 earned 0 total points
ID: 40030898
Again - this is after the fact.  NO way to tell the user who modified a policy?
0
 

Author Closing Comment

by:snowdog_2112
ID: 40077102
Apparently, unless auditing is already in place, there is not a mechanism to determine the user who changed a GPO.  Even if auditing is enabled, a concern would be the age of the change - for example, if the change ages and the security logs are rolled or overwritten.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Suggested Courses
Course of the Month14 days, 15 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question