• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2101
  • Last Modified:

Active Directory - determine who created a GPO

Is it possible to determine which username created a GPO?

On the Details tab, I see the Owner, but it is "Domain Admins".  I'd like to know which specific username created a GPO.
0
snowdog_2112
Asked:
snowdog_2112
  • 3
1 Solution
 
Sarang TinguriaSr EngineerCommented:
0
 
snowdog_2112Author Commented:
I need to determine who created a GPO which already exists.

The issue is, a GPO has caused operational side-effects, so I need to know who created it to make sure they are aware of their mistake.

Any options?
0
 
snowdog_2112Author Commented:
Again - this is after the fact.  NO way to tell the user who modified a policy?
0
 
snowdog_2112Author Commented:
Apparently, unless auditing is already in place, there is not a mechanism to determine the user who changed a GPO.  Even if auditing is enabled, a concern would be the age of the change - for example, if the change ages and the security logs are rolled or overwritten.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now