RE: AD Policy audit tool for Windows 2000

Koolk3,

You want the "Group Policy Management" snap-in from Microsoft. Should
work on 2000 as well as 2003. The tool shows you what settings each GPO
sets. It doesn't, to my knowledge, provide a diff from an original
install, so it isn't "ideal". However, you can easily get a default
install config with a stand alone box and "dcpromo.exe" ;)

Best Regards,
Scott Ramsdell



-----Original Message-----
From: Koolk3 [mailto:koolk3@xxxxxxxxx]
Sent: Wednesday, May 24, 2006 2:11 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: AD Policy audit tool for Windows 2000

Hello list,

Basically, I am trying to find the policies that has been changed by
active directory after a default Windows 2000 installation. The policies
were modifed without any documenattion and now it is a problem.

I am looking for a tool that can help me audit Active Directory policies
that has been applied to Windows 2000 workstations. Ideally the tool
should know the default policy (from original win 2000
install) and then give me a report on what has changed.

Most tools that does this are for Windows XP and I need something for
Windows 2000.

Any suggestions?

Sincerely,
--
KoolK3


This communication is from a law firm and may contain confidential and/or privileged information. If it has been sent to you in error, please contact the sender for instructions concerning return or destruction, and do not use or disclose the contents to others.

Relevant Pages

  • Re: Group polices not getting implemented on XP professional
    ... I have tried the things but still not getting policies on clients, ... Tahnks & Regards ... This setting should be found on the XP machine under the local policy. ... Upgrading Windows 2000 Group Policy for Windows XP ...
    (microsoft.public.win2000.active_directory)
  • Re: AVG8 - Grrr
    ... Dump AVG8 then you can stop blaming it and find the real cause? ... plain jane install without all the crap. ... double-click Don't run specified Windows ... policy settings are defined, they may override this local policy ...
    (uk.comp.homebuilt)
  • Re: Windows 2003 Server - Group Policy
    ... Group Policies refresh time is 90-minute intervals by default. ... For Windows 2000 Computers see the follow KB: ... Policy Inheritance can be set to this OU it means no policies from higher ... You can also set No Override to a particular GPO. ...
    (microsoft.public.win2000.active_directory)
  • Windows XP Service pack2 errors
    ... I was trying to install Windows XP service pack 2 on one of the ... machines with SP2 I could not see the "Network connections" and could ... not access the dependancies tab in the Windows Installer service. ... Domain Policy on your server. ...
    (microsoft.public.windowsxp.general)
  • Re: AVG v7 is free - but is v8?
    ... AVG anti-virus is also free? ... rather not install it only to have the fun of uninstalling it :-) thx ... fact it makes no outrageous demands as to even which version of windows ... policy settings are defined, they may override this local policy ...
    (uk.comp.homebuilt)