Audting Group Policy Changes

i running mixed mode 08/03 domain , know if gpo have been created/modified/deleted. whats recommended way achieve this?

in particular can of gurus point me appropriate eventids can tracked such changes gpos. also, agpm included in newer gpmt versions? or 08 gpos?

thanks in advance.

out of box able find out made change. won't tell changed

audit directory service access enabled default in default domain controllers policy (you can check yours , make sure still on)

then auditing turned on policies container within ad.

so event 566 in logs. (check pdc emulator first)

here rub that; can see auditing when change gpo happens. not tell changed in gpo. that, need 3rd party product.

good blog on subject here:

agmp still not included default (i wish was)...it still part of mdop

thanks

mike

Windows Server > Directory Services

Light