How do I Audit Group Policy Changes 1

[Helpdeskboy]

I am working for a company that manages multiple customer domains, and have found now that two seperate domains have had the same issue regarding a change is the domains group policy settings,

I am guessing but I believe one of the support team (who have Domain Admin rights in these domains) have changed something either intentionally or otherwise.

Can anyone advise what auditing should be turned on to ensure that I will pick up on any changes to group policies.

We have monitoring tools in place that we can set to email on specific windows event log entries and many auditing settings are turned on already but as there have been no nofication something in out monitoring/auditing setup needs updating

Regards

PS apologies if this had already been asked i was unable to find the answer from the forums that i looked through.

 

[tfg13]

I take it this article didn't help (if you are using a Windows domain)?

http://blogs.msdn.com/ericfitz/archive/2005/08/04/447951.aspx

 

[Helpdeskboy]

Thanks tfg13

i will read through this is must have missed it was having information overlaod looking into this