Hi ,
Events are not filling up in the Event Logs when i modified the GPO Links with GP MC. But is filling up when i m using the ADUC. All My DCs are 2K3 with Schema version 44.(Domain and Forest Functional Level is 2003)
It will record the all the Other modification in the GPO, but it will not record the GPO link changes. Specifically the Event ID:566 with the GPO link changes. I can see that Same Event ID is recorded in the Event Viewer for creation and other GPO Modification.
I am not getting the below Mentioned Event When i modified the GPO Link changes with GPMC.
Event Type: Success Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 566
Date: 1/14/2011
Time: 1:46:00 PM
User: TestDomain\Administrator
Computer: TestDomain-DC1
Description:
Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: organizationalUnit
Object Name: OU=BalajiOU,DC=admp,DC=com
Handle ID: -
Primary User Name: TestDomain-DC1$
Primary Domain: TestDomain
Primary Logon ID: (0x0,0x3E7)
Client User Name: Administrator
Client Domain: TestDomain
Client Logon ID: (0x0,0x45008C)
Accesses: Write Property
Properties:
Write Property
Default property set
gPLink
gPOptions
organizationalUnit
Additional Info:
Additional Info2:
Access Mask: 0x20
Any help will be greatly appreciated.
Thanks and regards
Apu Pavithran
Events are not filling up in the Event Logs when i modified the GPO Links with GP MC. But is filling up when i m using the ADUC. All My DCs are 2K3 with Schema version 44.(Domain and Forest Functional Level is 2003)
It will record the all the Other modification in the GPO, but it will not record the GPO link changes. Specifically the Event ID:566 with the GPO link changes. I can see that Same Event ID is recorded in the Event Viewer for creation and other GPO Modification.
I am not getting the below Mentioned Event When i modified the GPO Link changes with GPMC.
Event Type: Success Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 566
Date: 1/14/2011
Time: 1:46:00 PM
User: TestDomain\Administrator
Computer: TestDomain-DC1
Description:
Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: organizationalUnit
Object Name: OU=BalajiOU,DC=admp,DC=com
Handle ID: -
Primary User Name: TestDomain-DC1$
Primary Domain: TestDomain
Primary Logon ID: (0x0,0x3E7)
Client User Name: Administrator
Client Domain: TestDomain
Client Logon ID: (0x0,0x45008C)
Accesses: Write Property
Properties:
Write Property
Default property set
gPLink
gPOptions
organizationalUnit
Additional Info:
Additional Info2:
Access Mask: 0x20
Any help will be greatly appreciated.
Thanks and regards
Apu Pavithran