Yep. The other thing you could do is look at the metadata for the gplink attribute. This will tell you the last time it was udpated and where the change was mastered but that is about it.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darren Mar-Elia Sent: Wednesday, March 09, 2005 3:53 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Speaking of DAs...GP link Date Not easily. The way this works is that the DN of the GPC object is stored on the gpLink attribute on the container object in question. So you could audit on that container object (OU) for changes to gpLink but then you have to figure out which GPO was added/removed by its DN. So it's a container-centric thing rather than a GPO-centric thing. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Wednesday, March 09, 2005 12:11 PM To: activedir@mail.activedir.org Subject: [ActiveDir] Speaking of DAs...GP link Date Speaking of domain admins. Anyone know of a way to find out when a GP was linked to an OU? (or alternatively when the links on the GP were last updated)? --Brian Desmond [EMAIL PROTECTED] Payton on the web! www.wpcp.org v - 773.534.0034 x135 f - 773.534.8101 c - 312.731.3132 List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/