ToolsHere’s another great article I found while I was checking out what was new over on the TechNet Wiki this morning. This one was written by Jan Varšavský and shows you how to monitor GPO changes using OpsMgr 2007 and PowerShell:

Monitoring GPO changes is quite complex discipline and for covering all aspects is available couple of tools or extra modules. Goal of this article is not detailed analysis of monitoring GPO changes but guidelines how to use recourses of SCOM and PowerShell to get basic overview of GPO monitoring.  Before we start lets go through quick summary. On Group Policy Object subject of monitoring can be:

  • Creating or deleting GPO
  • Changes in GPO
  • Changes in AD part
  • Changes in SYSVOL part
  • Linking or unlinking to Organization Unit
  • Changing in DACL and SACL

By monitoring we can rely on auditing more precisely on events that are created in security log. Using this method is quite straightforward but has one important weakness….

You can continue reading Jan’s article here.

J.C. Hornbeck | System Center Knowledge Engineer

App-V Team blog: http://blogs.technet.com/appv/
AVIcode Team blog: http://blogs.technet.com/b/avicode
ConfigMgr Support Team blog: http://blogs.technet.com/configurationmgr/
DPM Team blog: http://blogs.technet.com/dpm/
MED-V Team blog: http://blogs.technet.com/medv/
OOB Support Team blog: http://blogs.technet.com/oob/
Opalis Team blog: http://blogs.technet.com/opalis
Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
OpsMgr Support Team blog: http://blogs.technet.com/operationsmgr/
SCMDM Support Team blog: http://blogs.technet.com/mdm/
SCVMM Team blog: http://blogs.technet.com/scvmm
Server App-V Team blog: http://blogs.technet.com/b/serverappv
Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center Essentials Team blog: http://blogs.technet.com/b/systemcenteressentials
WSUS Support Team blog: http://blogs.technet.com/sus/

clip_image001 clip_image002