RE: AD Policy audit tool for Windows 2000



Koolk3,

You want the "Group Policy Management" snap-in from Microsoft. Should
work on 2000 as well as 2003. The tool shows you what settings each GPO
sets. It doesn't, to my knowledge, provide a diff from an original
install, so it isn't "ideal". However, you can easily get a default
install config with a stand alone box and "dcpromo.exe" ;)

Best Regards,
Scott Ramsdell



-----Original Message-----
From: Koolk3 [mailto:koolk3@xxxxxxxxx]
Sent: Wednesday, May 24, 2006 2:11 PM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: AD Policy audit tool for Windows 2000

Hello list,

Basically, I am trying to find the policies that has been changed by
active directory after a default Windows 2000 installation. The policies
were modifed without any documenattion and now it is a problem.

I am looking for a tool that can help me audit Active Directory policies
that has been applied to Windows 2000 workstations. Ideally the tool
should know the default policy (from original win 2000
install) and then give me a report on what has changed.

Most tools that does this are for Windows XP and I need something for
Windows 2000.

Any suggestions?

Sincerely,
--
KoolK3


This communication is from a law firm and may contain confidential and/or privileged information. If it has been sent to you in error, please contact the sender for instructions concerning return or destruction, and do not use or disclose the contents to others.



Relevant Pages

  • Re: Group polices not getting implemented on XP professional
    ... I have tried the things but still not getting policies on clients, ... Tahnks & Regards ... This setting should be found on the XP machine under the local policy. ... Upgrading Windows 2000 Group Policy for Windows XP ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows 2003 Server - Group Policy
    ... Group Policies refresh time is 90-minute intervals by default. ... For Windows 2000 Computers see the follow KB: ... Policy Inheritance can be set to this OU it means no policies from higher ... You can also set No Override to a particular GPO. ...
    (microsoft.public.win2000.active_directory)
  • Windows XP Service pack2 errors
    ... I was trying to install Windows XP service pack 2 on one of the ... machines with SP2 I could not see the "Network connections" and could ... not access the dependancies tab in the Windows Installer service. ... Domain Policy on your server. ...
    (microsoft.public.windowsxp.general)
  • Re: Policies
    ... See www.dougknox.com, Win XP Utilities, Windows XP Security Console for a utility that will allow you to apply a large number of Per-user restrictions on a Per-user basis. ... Per user Group Policy Restrictions for XP Home and XP Pro ... > have looked at a lot of marterial about policies but none of it (that I have ... >>> modify; ...
    (microsoft.public.windowsxp.basics)
  • Re: Software Installation not working
    ... I too get succesfull status in the event log but nothing seems ... to install. ... that the policy was deployed to that computer ... > install of application Windows XP Pro from the policy succeeded". ...
    (microsoft.public.win2000.group_policy)