TechNet Wiki: Monitoring GPO changes using SCOM 2007 and PowerShell

Article
07/19/2011

Here’s another great article I found while I was checking out what was new over on the TechNet Wiki this morning. This one was written by Jan Varšavský and shows you how to monitor GPO changes using OpsMgr 2007 and PowerShell:

Monitoring GPO changes is quite complex discipline and for covering all aspects is available couple of tools or extra modules. Goal of this article is not detailed analysis of monitoring GPO changes but guidelines how to use recourses of SCOM and PowerShell to get basic overview of GPO monitoring. Before we start lets go through quick summary. On Group Policy Object subject of monitoring can be:

Creating or deleting GPO
Changes in GPO
Changes in AD part
Changes in SYSVOL part
Linking or unlinking to Organization Unit
Changing in DACL and SACL

By monitoring we can rely on auditing more precisely on events that are created in security log. Using this method is quite straightforward but has one important weakness….

You can continue reading Jan’s article here.

J.C. Hornbeck | System Center Knowledge Engineer

TechNet Wiki: Monitoring GPO changes using SCOM 2007 and PowerShell

Additional resources