RE: AD Policy audit tool for Windows 2000

["Ramsdell, Scott" <sramsdell () stinsonmoheck com>]

Koolk3,

You want the "Group Policy Management" snap-in from Microsoft.  Should
work on 2000 as well as 2003.  The tool shows you what settings each GPO
sets.  It doesn't, to my knowledge, provide a diff from an original
install, so it isn't "ideal".  However, you can easily get a default
install config with a stand alone box and "dcpromo.exe" ;)

Best Regards,
Scott Ramsdell

 

-----Original Message-----
From: Koolk3 [mailto:koolk3 () gmail com] 
Sent: Wednesday, May 24, 2006 2:11 PM
To: security-basics () securityfocus com
Subject: AD Policy audit tool for Windows 2000

Hello list,

Basically, I am trying to find the policies that has been changed by
active directory after a default Windows 2000 installation. The policies
were modifed without any documenattion and now it is a problem.

I am looking for a tool that can help me audit Active Directory policies
that has been applied to Windows 2000 workstations. Ideally the tool
should know the default policy (from original win 2000
install) and then give me a report on what has changed.

Most tools that does this are for Windows XP and I need something for
Windows 2000.

Any suggestions?

Sincerely,
--
KoolK3
 
 
This communication is from a law firm and may contain confidential and/or privileged information. If it has been sent 
to you in error, please contact the sender for instructions concerning return or destruction, and do not use or 
disclose the contents to others.