What's the best way to audit for GPO changes? I enabled "Audit directory service access", which causes an audit event to occur, but it also does the same for other kinds of DS changes, which make it a bit more cumbersome. This is for Windows 2000, btw. Is it easier to do with W2K3?
I thought perhaps auditing for the actual file level changes, but I'm not sure if that's a much cleaner solution... List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
